security MegaLinter Flavor

Description

Optimized for security

Usage

• GitHub Action: oxsecurity/megalinter/flavors/security@v6
• Docker image: oxsecurity/megalinter-security:v6
• mega-linter-runner: mega-linter-runner --flavor security

Embedded linters

Languages

	Language	Linter	Configuration key	Additional
	BASH	bash-exec	BASH_EXEC
		shellcheck	BASH_SHELLCHECK
		bandit	PYTHON_BANDIT

Formats

	Format	Linter	Configuration key	Additional

Tooling formats

	Tooling format	Linter	Configuration key	Additional
	ANSIBLE	ansible-lint	ANSIBLE_ANSIBLE_LINT
	CLOUDFORMATION	cfn-lint	CLOUDFORMATION_CFN_LINT
	DOCKERFILE	hadolint	DOCKERFILE_HADOLINT
	KUBERNETES	kubeval	KUBERNETES_KUBEVAL
		kubeconform	KUBERNETES_KUBECONFORM
	TERRAFORM	tflint	TERRAFORM_TFLINT
		terrascan	TERRAFORM_TERRASCAN
		terragrunt	TERRAFORM_TERRAGRUNT
		checkov	TERRAFORM_CHECKOV
		kics	TERRAFORM_KICS

Other

	Code quality checker	Linter	Configuration key	Additional
	REPOSITORY	devskim	REPOSITORY_DEVSKIM
		dustilock	REPOSITORY_DUSTILOCK
		gitleaks	REPOSITORY_GITLEAKS
		secretlint	REPOSITORY_SECRETLINT
		semgrep	REPOSITORY_SEMGREP
		syft	REPOSITORY_SYFT
		trivy	REPOSITORY_TRIVY