khyretos/kk-engine
1
0
Fork 0
Code Issues 1 Pull requests 16 Projects Releases Packages Wiki Activity Actions 1

Update actions/checkout action to v7 #160

Merged
khyretos merged 1 commit from renovate/actions-checkout-7.x into main 2026-11-09 14:19:36 +01:00
Conversation 5 Commits 1 Files changed 10 +28 -28
kompas-deps commented 2026-11-09 03:37:44 +01:00
Collaborator
Copy link

This PR contains the following updates:

Package Type Update Change
actions/checkout action major v5 → v7
actions/checkout action major v4 → v7

Release Notes

actions/checkout

v7.0.1

Compare Source

v7.0.0

Compare Source

  • Block checking out fork PR for pull_request_target and workflow_run by @​aiqiaoy in #​2454
  • Various dependency updates

v6.1.0

Compare Source

What's Changed

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: https://github.com/actions/checkout/compare/v6.0.3...v6.1.0

v6.0.3

Compare Source

v6.0.2

Compare Source

v6.0.1

Compare Source

v6.0.0

Compare Source

Configuration

📅 Schedule: (in timezone Europe/Amsterdam)

  • Branch creation
    • "before 6am on monday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://github.com/actions/checkout) | action | major | `v5` → `v7` | | [actions/checkout](https://github.com/actions/checkout) | action | major | `v4` → `v7` | --- ### Release Notes <details> <summary>actions/checkout</summary> ### [`v7.0.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v701) [Compare Source](https://github.com/actions/checkout/compare/v7.0.0...v7.0.1) - Skip running unsafe pr check if input is default by [@&#8203;aiqiaoy](https://github.com/aiqiaoy) in [#&#8203;2518](https://github.com/actions/checkout/pull/2518) - Trim only ascii whitespace for branch by [@&#8203;aiqiaoy](https://github.com/aiqiaoy) in [#&#8203;2521](https://github.com/actions/checkout/pull/2521) - Escape values passed to --unset by [@&#8203;aiqiaoy](https://github.com/aiqiaoy) in [#&#8203;2530](https://github.com/actions/checkout/pull/2530) - Various dependency updates ### [`v7.0.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v700) [Compare Source](https://github.com/actions/checkout/compare/v6.1.0...v7.0.0) - Block checking out fork PR for pull_request_target and workflow_run by [@&#8203;aiqiaoy](https://github.com/aiqiaoy) in [#&#8203;2454](https://github.com/actions/checkout/pull/2454) - Various dependency updates ### [`v6.1.0`](https://github.com/actions/checkout/releases/tag/v6.1.0) [Compare Source](https://github.com/actions/checkout/compare/v6.0.3...v6.1.0) #### What's Changed - **\[BREAKING]** backport `allow-unsafe-pr-checkout` to v6 by [@&#8203;aiqiaoy](https://github.com/aiqiaoy) in [#&#8203;2500](https://github.com/actions/checkout/pull/2500) - backport fixes to releases-v6 by [@&#8203;aiqiaoy](https://github.com/aiqiaoy) in [#&#8203;2527](https://github.com/actions/checkout/pull/2527) <https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/> for more details about this breaking change **Full Changelog**: <https://github.com/actions/checkout/compare/v6.0.3...v6.1.0> ### [`v6.0.3`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v603) [Compare Source](https://github.com/actions/checkout/compare/v6.0.2...v6.0.3) - Fix checkout init for SHA-256 repositories by [@&#8203;yaananth](https://github.com/yaananth) in [#&#8203;2439](https://github.com/actions/checkout/pull/2439) - fix: expand merge commit SHA regex and add SHA-256 test cases by [@&#8203;yaananth](https://github.com/yaananth) in [#&#8203;2414](https://github.com/actions/checkout/pull/2414) ### [`v6.0.2`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v602) [Compare Source](https://github.com/actions/checkout/compare/v6.0.1...v6.0.2) - Fix tag handling: preserve annotations and explicit fetch-tags by [@&#8203;ericsciple](https://github.com/ericsciple) in [#&#8203;2356](https://github.com/actions/checkout/pull/2356) ### [`v6.0.1`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v601) [Compare Source](https://github.com/actions/checkout/compare/v6.0.0...v6.0.1) - Add worktree support for persist-credentials includeIf by [@&#8203;ericsciple](https://github.com/ericsciple) in [#&#8203;2327](https://github.com/actions/checkout/pull/2327) ### [`v6.0.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v600) [Compare Source](https://github.com/actions/checkout/compare/v5.1.0...v6.0.0) - Persist creds to a separate file by [@&#8203;ericsciple](https://github.com/ericsciple) in [#&#8203;2286](https://github.com/actions/checkout/pull/2286) - Update README to include Node.js 24 support details and requirements by [@&#8203;salmanmkc](https://github.com/salmanmkc) in [#&#8203;2248](https://github.com/actions/checkout/pull/2248) </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/Amsterdam) - Branch creation - "before 6am on monday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4yMjIuNSIsInVwZGF0ZWRJblZlciI6IjQ0LjIyMi41IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBzLW1ham9yIiwiaG9sZCJdfQ==-->
Update actions/checkout action to v7
All checks were successful
Benchmarks / benchmarks (pull_request) Successful in 1m45s
Details
CI / shipping-build (pull_request) Successful in 1m21s
Details
CI / release-build (pull_request) Successful in 3m13s
Details
CI / android (pull_request) Successful in 4m36s
Details
lint / megalinter (pull_request) Successful in 3m58s
Details
Windows (native) / build (pull_request) Successful in 4m42s
Details
Windows (native) / test (pull_request) Successful in 5m48s
Details
CI / build-test-and-coverage (pull_request) Successful in 22m34s
Details
kreative-pr/review reviewed: 0 finding(s)
Details
review / pr-agent PR-Agent reviewed this commit
Windows (native) / publish (pull_request) Has been skipped
Details
kk / all-checks All 14 checks passed
CI / dependencies (pull_request) Successful in 11s
Details
CI / std-includes (pull_request) Successful in 17s
Details
Docs site / site (pull_request) Successful in 50s
Details
3ff45c4d1c
kompas-review commented 2026-11-09 03:38:15 +01:00
Collaborator
Copy link

On hold (hold): this PR does not merge by itself. Reply merge here and it merges as soon as the checks pass.

<!-- kk-automerge:hold --> On hold (hold): this PR does not merge by itself. Reply `merge` here and it merges as soon as the checks pass.
kompas-review commented 2026-11-09 03:45:20 +01:00
Collaborator
Copy link

Title

Update actions/checkout action to v7

PR Type

Configuration changes

Description

  • Update actions/checkout to v7 across all CI workflows

  • Replace v4, v5 versions with unified v7 in GitHub and ForgeJo

  • Ensure consistent dependency management for build pipelines

Diagram Walkthrough

flowchart LR
  A["Old Checkout v4/v5"] -->|"Replaced by"| B["New Checkout v7"]
  B -->|"Used in"| C["GitHub Actions"]
  B -->|"Used in"| D["ForgeJo Workflows"]

File Walkthrough
Relevant files
Configuration changes
10 files
benchmarks-pr.yml
Update checkout action to v7 in benchmarks PR workflow     
+1/-1     
benchmarks.yml
Update checkout action to v7 in main benchmarks workflow 
+1/-1     
ci.yml
Update checkout action to v7 in all CI jobs                           
+6/-6     
macos.yml
Update checkout action to v7 in macOS build workflow         
+1/-1     
release.yml
Update checkout action to v7 in release workflows               
+3/-3     
vm-tests.yml
Update checkout action to v7 in VM test workflows               
+2/-2     
windows-native.yml
Update checkout action to v7 in Windows native workflows 
+2/-2     
ci.yml
Update checkout action from v4/v5 to v7 in CI                       
+6/-6     
platforms.yml
Update checkout action to v7 in platform-specific workflows
 +2/-2     
release.yml
Update checkout action to v7 in release and test workflows
 +4/-4     
## Title <!-- pr-agent:describe:persistent --> Update actions/checkout action to v7 ___ ### **PR Type** Configuration changes ___ ### **Description** - Update actions/checkout to v7 across all CI workflows - Replace v4, v5 versions with unified v7 in GitHub and ForgeJo - Ensure consistent dependency management for build pipelines ___ ### Diagram Walkthrough ```mermaid flowchart LR A["Old Checkout v4/v5"] -->|"Replaced by"| B["New Checkout v7"] B -->|"Used in"| C["GitHub Actions"] B -->|"Used in"| D["ForgeJo Workflows"] ``` <details> <summary><h3> File Walkthrough</h3></summary> <table><thead><tr><th></th><th align="left">Relevant files</th></tr></thead><tbody><tr><td><strong>Configuration changes</strong></td><td><details><summary>10 files</summary><table> <tr> <td><strong>benchmarks-pr.yml</strong><dd><code>Update checkout action to v7 in benchmarks PR workflow</code>&nbsp; &nbsp; &nbsp; </dd></td> <td><a href="https://git.kreative-kompas.com/khyretos/kk-engine/src/branch/renovate/actions-checkout-7.x/.forgejo/workflows/benchmarks-pr.yml">+1/-1</a>&nbsp; &nbsp; &nbsp; </td> </tr> <tr> <td><strong>benchmarks.yml</strong><dd><code>Update checkout action to v7 in main benchmarks workflow</code>&nbsp; </dd></td> <td><a href="https://git.kreative-kompas.com/khyretos/kk-engine/src/branch/renovate/actions-checkout-7.x/.forgejo/workflows/benchmarks.yml">+1/-1</a>&nbsp; &nbsp; &nbsp; </td> </tr> <tr> <td><strong>ci.yml</strong><dd><code>Update checkout action to v7 in all CI jobs</code>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; </dd></td> <td><a href="https://git.kreative-kompas.com/khyretos/kk-engine/src/branch/renovate/actions-checkout-7.x/.forgejo/workflows/ci.yml">+6/-6</a>&nbsp; &nbsp; &nbsp; </td> </tr> <tr> <td><strong>macos.yml</strong><dd><code>Update checkout action to v7 in macOS build workflow</code>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; </dd></td> <td><a href="https://git.kreative-kompas.com/khyretos/kk-engine/src/branch/renovate/actions-checkout-7.x/.forgejo/workflows/macos.yml">+1/-1</a>&nbsp; &nbsp; &nbsp; </td> </tr> <tr> <td><strong>release.yml</strong><dd><code>Update checkout action to v7 in release workflows</code>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; </dd></td> <td><a href="https://git.kreative-kompas.com/khyretos/kk-engine/src/branch/renovate/actions-checkout-7.x/.forgejo/workflows/release.yml">+3/-3</a>&nbsp; &nbsp; &nbsp; </td> </tr> <tr> <td><strong>vm-tests.yml</strong><dd><code>Update checkout action to v7 in VM test workflows</code>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; </dd></td> <td><a href="https://git.kreative-kompas.com/khyretos/kk-engine/src/branch/renovate/actions-checkout-7.x/.forgejo/workflows/vm-tests.yml">+2/-2</a>&nbsp; &nbsp; &nbsp; </td> </tr> <tr> <td><strong>windows-native.yml</strong><dd><code>Update checkout action to v7 in Windows native workflows</code>&nbsp; </dd></td> <td><a href="https://git.kreative-kompas.com/khyretos/kk-engine/src/branch/renovate/actions-checkout-7.x/.forgejo/workflows/windows-native.yml">+2/-2</a>&nbsp; &nbsp; &nbsp; </td> </tr> <tr> <td><strong>ci.yml</strong><dd><code>Update checkout action from v4/v5 to v7 in CI</code>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; </dd></td> <td><a href="https://git.kreative-kompas.com/khyretos/kk-engine/src/branch/renovate/actions-checkout-7.x/.github/workflows/ci.yml">+6/-6</a>&nbsp; &nbsp; &nbsp; </td> </tr> <tr> <td><strong>platforms.yml</strong><dd><code>Update checkout action to v7 in platform-specific workflows</code></dd></td> <td><a href="https://git.kreative-kompas.com/khyretos/kk-engine/src/branch/renovate/actions-checkout-7.x/.github/workflows/platforms.yml">+2/-2</a>&nbsp; &nbsp; &nbsp; </td> </tr> <tr> <td><strong>release.yml</strong><dd><code>Update checkout action to v7 in release and test workflows</code></dd></td> <td><a href="https://git.kreative-kompas.com/khyretos/kk-engine/src/branch/renovate/actions-checkout-7.x/.github/workflows/release.yml">+4/-4</a>&nbsp; &nbsp; &nbsp; </td> </tr> </table></details></td></tr></tr></tbody></table> </details> ___
khyretos commented 2026-11-09 04:42:53 +01:00
Owner
Copy link

/review

/review
kompas-review commented 2026-11-09 04:43:04 +01:00
Collaborator
Copy link

PR Reviewer Guide 🔍

Here are some key observations to aid the review process:

🔒 No security concerns identified
⚡ No major issues detected
## PR Reviewer Guide 🔍 <!-- pr-agent:review:full --> Here are some key observations to aid the review process: <table> <tr><td>🔒&nbsp;<strong>No security concerns identified</strong></td></tr> <tr><td>⚡&nbsp;<strong>No major issues detected</strong></td></tr> </table>
forgejo-actions commented 2026-11-09 07:00:23 +01:00
Copy link

🧹 Lint report · ❌ 38 problems in 6 checks · 🧹 2 formatting checks to tidy

Nothing here blocks the merge (report only).

Check Errors Warnings Files
❌ MARKDOWN · markdownlint 24 0 254
❌ CPP · cppcheck 9 0 942
❌ YAML · yamllint 2 0 57
❌ BASH · shellcheck 1 0 13
❌ DOCKERFILE · hadolint 1 0 9
❌ REPOSITORY · trivy 1 0 –
MARKDOWN · markdownlint: first lines of the output 
See documentation on https://megalinter.io/9.4.0/descriptors/markdown_markdownlint/
-----------------------------------------------
❌ [ERROR] for workspace /workspace/khyretos/kk-engine
Linter raw log:
docs/ANDROID.md:87 error MD040/fenced-code-language Fenced code blocks should have a language specified [Context: "```"]
docs/ANDROID.md:128 error MD040/fenced-code-language Fenced code blocks should have a language specified [Context: "```"]
docs/ANDROID.md:136 error MD040/fenced-code-language Fenced code blocks should have a language specified [Context: "```"]
docs/ANDROID.md:149 error MD040/fenced-code-language Fenced code blocks should have a language specified [Context: "```"]
docs/ANDROID.md:163 error MD040/fenced-code-language Fenced code blocks should have a language specified [Context: "```"]
docs/ANDROID.md:186 error MD040/fenced-code-language Fenced code blocks should have a language specified [Context: "```"]
docs/ASSETS.md:155 error MD046/code-block-style Code block style [Expected: fenced; Actual: indented]
docs/HISTORY.md:21 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: " Kreative Kompas Engine (KKE)"]
docs/HISTORY.md:520 error MD040/fenced-code-language Fenced code blocks should have a language specified [Context: "```"]
docs/HISTORY.md:727 error MD040/fenced-code-language Fenced code blocks should have a language specified [Context: "```"]
docs/HISTORY.md:734 error MD040/fenced-code-language Fenced code blocks should have a language specified [Context: "```"]
docs/HISTORY.md:2031 error MD040/fenced-code-language Fenced code blocks should have a language specified [Context: "```"]
docs/HISTORY.md:2090 error MD040/fenced-code-language Fenced code blocks should have a language specified [Context: "```"]
docs/MODDING.md:13 error MD040/fenced-code-language Fenced code blocks should have a language specified [Context: "```"]
docs/NETWORKING.md:114 error MD040/fenced-code-language Fenced code blocks should have a language specified [Context: "```"]
docs/PLATFORMS.md:48 error MD040/fenced-code-language Fenced code blocks should have a language specified [Context: "```"]
docs/PROCEDURAL_ANIMATION.md:36 error MD040/fenced-code-language Fenced code blocks should have a language specified [Context: "```"]
docs/PROCEDURAL_ANIMATION.md:284 error MD040/fenced-code-language Fenced code blocks should have a language specified [Context: "```"]
games/racing/README.md:34 error MD040/fenced-code-language Fenced code blocks should have a language specified [Context: "```"]
games/racing/README.md:76:91 error MD056/table-column-count Table column count [Expected: 4; Actual: 3; Too few cells, row will be missing data]
games/racing/README.md:77:89 error MD056/table-column-count Table column count [Expected: 4; Actual: 3; Too few cells, row will be missing data]
…
CPP · cppcheck: first lines of the output 
See documentation on https://megalinter.io/9.4.0/descriptors/cpp_cppcheck/
-----------------------------------------------
✅ [SUCCESS] benchmarks/kke_bench/main.cpp
✅ [SUCCESS] benchmarks/kke_benchmark/main.cpp
✅ [SUCCESS] engine/include/engine/Buffer.h
✅ [SUCCESS] engine/include/engine/Mesh.h
✅ [SUCCESS] engine/include/engine/Pipeline.h
✅ [SUCCESS] engine/include/engine/Renderer.h
✅ [SUCCESS] engine/include/engine/SwapChain.h
✅ [SUCCESS] engine/include/engine/VulkanCheck.h
✅ [SUCCESS] engine/include/engine/VulkanDevice.h
✅ [SUCCESS] engine/include/engine/Window.h
✅ [SUCCESS] engine/include/kke/AnimEvents.h
✅ [SUCCESS] engine/include/kke/AnimRig.h
✅ [SUCCESS] engine/include/kke/Animator.h
✅ [SUCCESS] engine/include/kke/Application.h
✅ [SUCCESS] engine/include/kke/AssetCatalog.h
✅ [SUCCESS] engine/include/kke/AudioMixer.h
✅ [SUCCESS] engine/include/kke/AutoRig.h
✅ [SUCCESS] engine/include/kke/BenchRecorder.h
✅ [SUCCESS] engine/include/kke/BenchmarkReport.h
✅ [SUCCESS] engine/include/kke/Bloom.h
✅ [SUCCESS] engine/include/kke/BodyShape.h
✅ [SUCCESS] engine/include/kke/BreakGraph.h
✅ [SUCCESS] engine/include/kke/Breakables.h
…
YAML · yamllint: first lines of the output 
See documentation on https://megalinter.io/9.4.0/descriptors/yaml_yamllint/
-----------------------------------------------
❌ [ERROR] for workspace /workspace/khyretos/kk-engine
Linter raw log:
games/goblin_horde/data/heroes.yml
  53:11     error    too many spaces after colon  (colons)
  63:11     error    too many spaces after colon  (colons)
BASH · shellcheck: first lines of the output 
See documentation on https://megalinter.io/9.4.0/descriptors/bash_shellcheck/
-----------------------------------------------
❌ [ERROR] for workspace /workspace/khyretos/kk-engine
Linter raw log:
In tools/packaging/package.sh line 130:
	done < <(find "$stage" "$stage/benchmark" -maxdepth 1 -type f \( -name "*$exe" -o -name '*.dll' \) $([ -z "$exe" ] && echo "-perm -u+x") -print0)
                                                                                                           ^-- SC2046 (warning): Quote this to prevent word splitting.
For more information:
  https://www.shellcheck.net/wiki/SC2046 -- Quote this to prevent word splitt...
DOCKERFILE · hadolint: first lines of the output 
See documentation on https://megalinter.io/9.4.0/descriptors/dockerfile_hadolint/
-----------------------------------------------
❌ [ERROR] for workspace /workspace/khyretos/kk-engine
Linter raw log:
docker/android.Dockerfile:19 DL4006 warning: Set the SHELL option -o pipefail before RUN with a pipe in it. If you are using /bin/sh in an alpine image or if your shell is symlinked to busybox then consider explicitly setting your SHELL to /bin/ash, or disable this check
docker/appimage.Dockerfile:38 SC2016 info: Expressions don't expand in single quotes, use double quotes for that.
docker/appimage.Dockerfile:51 DL3003 warning: Use WORKDIR to switch to a directory
docker/appimage.Dockerfile:57 DL3003 warning: Use WORKDIR to switch to a directory
docker/appimage.Dockerfile:63 DL4006 warning: Set the SHELL option -o pipefail before RUN with a pipe in it. If you are using /bin/sh in an alpine image or if your shell is symlinked to busybox then consider explicitly setting your SHELL to /bin/ash, or disable this check
docker/appimage.Dockerfile:63 DL3003 warning: Use WORKDIR to switch to a directory
docker/appimage.Dockerfile:73 DL4006 warning: Set the SHELL option -o pipefail before RUN with a pipe in it. If you are using /bin/sh in an alpine image or if your shell is symlinked to busybox then consider explicitly setting your SHELL to /bin/ash, or disable this check
docker/appimage.Dockerfile:73 DL3003 warning: Use WORKDIR to switch to a directory
docker/ci.Dockerfile:42 DL4006 warning: Set the SHELL option -o pipefail before RUN with a pipe in it. If you are using /bin/sh in an alpine image or if your shell is symlinked to busybox then consider explicitly setting your SHELL to /bin/ash, or disable this check
docker/ci.Dockerfile:56 DL4006 warning: Set the SHELL option -o pipefail before RUN with a pipe in it. If you are using /bin/sh in an alpine image or if your shell is symlinked to busybox then consider explicitly setting your SHELL to /bin/ash, or disable this check
docker/server/Dockerfile:22 DL4006 warning: Set the SHELL option -o pipefail before RUN with a pipe in it. If you are using /bin/sh in an alpine image or if your shell is symlinked to busybox then consider explicitly setting your SHELL to /bin/ash, or disable this check
docker/vm.Dockerfile:22 SC2086 info: Double quote to prevent globbing and word splitting.
docker/vm.Dockerfile:29 DL3003 warning: Use WORKDIR to switch to a directory
docker/vm.Dockerfile:29 DL4006 warning: Set the SHELL option -o pipefail before RUN with a pipe in it. If you are using /bin/sh in an alpine image or if your shell is symlinked to busybox then consider explicitly setting your SHELL to /bin/ash, or disable this check
website/Dockerfile:9 DL4006 warning: Set the SHELL option -o pipefail before RUN with a pipe in it. If you are using /bin/sh in an alpine image or if your shell is symlinked to busybox then consider explicitly setting your SHELL to /bin/ash, or disable this check
REPOSITORY · trivy: first lines of the output 
See documentation on https://megalinter.io/9.4.0/descriptors/repository_trivy/
-----------------------------------------------
❌ [ERROR] for workspace /workspace/khyretos/kk-engine
Linter raw log:
2026-11-09T05:56:46Z	INFO	[vulndb] Need to update DB
2026-11-09T05:56:46Z	INFO	[vulndb] Downloading vulnerability DB...
2026-11-09T05:56:46Z	INFO	[vulndb] Downloading artifact...	repo="mirror.gcr.io/aquasec/trivy-db:2"
10.59 MiB / 131.37 MiB [---->________________________________________________________] 8.06% ? p/s ?23.27 MiB / 131.37 MiB [---------->_________________________________________________] 17.71% ? p/s ?29.29 MiB / 131.37 MiB [------------->______________________________________________] 22.30% ? p/s ?33.57 MiB / 131.37 MiB [------------>__________________________________] 25.55% 38.45 MiB p/s ETA 2s37.87 MiB / 131.37 MiB [------------->_________________________________] 28.83% 38.45 MiB p/s ETA 2s43.27 MiB / 131.37 MiB [--------------->_______________________________] 32.94% 38.45 MiB p/s ETA 2s46.53 MiB / 131.37 MiB [---------------->______________________________] 35.42% 37.36 MiB p/s ETA 2s49.34 MiB / 131.37 MiB [----------------->_____________________________] 37.56% 37.36 MiB p/s ETA 2s52.34 MiB / 131.37 MiB [------------------>____________________________] 39.84% 37.36 MiB p/s ETA 2s56.02 MiB / 131.37 MiB [-------------------->__________________________] 42.64% 35.97 MiB p/s ETA 2s60.00 MiB / 131.37 MiB [--------------------->_________________________] 45.67% 35.97 MiB p/s ETA 1s62.40 MiB / 131.37 MiB [---------------------->________________________] 47.50% 35.97 MiB p/s ETA 1s65.02 MiB / 131.37 MiB [----------------------->_______________________] 49.50% 34.62 MiB p/s ETA 1s66.85 MiB / 131.37 MiB [----------------------->_______________________] 50.89% 34.62 MiB p/s ETA 1s69.29 MiB / 131.37 MiB [------------------------>______________________] 52.75% 34.62 MiB p/s ETA 1s75.04 MiB / 131.37 MiB [-------------------------->____________________] 57.12% 33.46 MiB p/s ETA 1s79.81 MiB / 131.37 MiB [---------------------------->__________________] 60.75% 33.46 MiB p/s ETA 1s86.03 MiB / 131.37 MiB [------------------------------>________________] 65.48% 33.46 MiB p/s ETA 1s100.69 MiB / 131.37 MiB [----------------------------------->__________] 76.65% 34.05 MiB p/s ETA 0s124.98 MiB / 131.37 MiB [------------------------------------------->__] 95.14% 34.05 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 34.05 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 35.17 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 35.17 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 35.17 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 32.90 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 32.90 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 32.90 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 30.78 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 30.78 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 30.78 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 28.79 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 28.79 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 28.79 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 26.93 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 26.93 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 26.93 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 25.19 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 25.19 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 25.19 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 23.57 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 23.57 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 23.57 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 22.05 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 22.05 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 22.05 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 20.63 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 20.63 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 20.63 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 19.30 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 19.30 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 19.30 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 18.05 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 18.05 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 18.05 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 16.89 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 16.89 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 16.89 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 15.80 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 15.80 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 15.80 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 14.78 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 14.78 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 14.78 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [------------------------------------------------] 100.00% 10.45 MiB p/s 13s2026-11-09T05:56:59Z	INFO	[vulndb] Artifact successfully downloaded	repo="mirror.gcr.io/aquasec/trivy-db:2"
2026-11-09T05:56:59Z	INFO	[vuln] Vulnerability scanning is enabled
2026-11-09T05:56:59Z	INFO	[misconfig] Misconfiguration scanning is enabled
2026-11-09T05:56:59Z	INFO	[checks-client] Need to update the checks bundle
2026-11-09T05:56:59Z	INFO	[checks-client] Downloading the checks bundle...
234.57 KiB / 234.57 KiB [------------------------------------------------------] 100.00% ? p/s 100ms2026-11-09T05:57:02Z	WARN	[rego] Module will be skipped as current version of Trivy is older than minimum trivy version required - please update Trivy to use this module	file_path="root/.cache/trivy/policy/content/policies/cloud/policies/aws/cloudfront/enable_logging.rego" minimum_trivy_version="0.72.0"
2026-11-09T05:57:03Z	ERROR	[dockerfile scanner] Failed to parse file	file_path="docker/server/Dockerfile.dockerignore" err="parse dockerfile instruction: parse instruction \".git\": unknown instruction: .git"
2026-11-09T05:57:04Z	INFO	Number of language-specific files	num=0
2026-11-09T05:57:04Z	INFO	Detected config files	num=9
Report Summary
┌──────────────────────────────┬────────────┬─────────────────┬───────────────────┐
│            Target            │    Type    │ Vulnerabilities │ Misconfigurations │
├──────────────────────────────┼────────────┼─────────────────┼───────────────────┤
│ benchmarks/docker/Dockerfile │ dockerfile │        -        │         2         │
├──────────────────────────────┼────────────┼─────────────────┼───────────────────┤
│ docker/android.Dockerfile    │ dockerfile │        -        │         2         │
├──────────────────────────────┼────────────┼─────────────────┼───────────────────┤
│ docker/appimage.Dockerfile   │ dockerfile │        -        │         5         │
…

🧹 Formatting only (layout, no behaviour; the nightly lint-fix job applies these as a PR): YAML · prettier (57 files checked), BASH · shfmt (13 files checked)

✅ Clean: actionlint, git_diff, gitleaks, grype, jsonlint, prettier, secretlint, stylelint, trufflehog, xmllint

MegaLinter on soucouyant · full logs in the Actions run · comment /improve for AI fix suggestions

<!-- kk-lint --> ## 🧹 Lint report · ❌ 38 problems in 6 checks · 🧹 2 formatting checks to tidy Nothing here blocks the merge (report only). | | Check | Errors | Warnings | Files | |---|---|---:|---:|---:| | ❌ | MARKDOWN · markdownlint | 24 | 0 | 254 | | ❌ | CPP · cppcheck | 9 | 0 | 942 | | ❌ | YAML · yamllint | 2 | 0 | 57 | | ❌ | BASH · shellcheck | 1 | 0 | 13 | | ❌ | DOCKERFILE · hadolint | 1 | 0 | 9 | | ❌ | REPOSITORY · trivy | 1 | 0 | – | <details><summary>MARKDOWN · markdownlint: first lines of the output</summary> ```text See documentation on https://megalinter.io/9.4.0/descriptors/markdown_markdownlint/ ----------------------------------------------- ❌ [ERROR] for workspace /workspace/khyretos/kk-engine Linter raw log: docs/ANDROID.md:87 error MD040/fenced-code-language Fenced code blocks should have a language specified [Context: "```"] docs/ANDROID.md:128 error MD040/fenced-code-language Fenced code blocks should have a language specified [Context: "```"] docs/ANDROID.md:136 error MD040/fenced-code-language Fenced code blocks should have a language specified [Context: "```"] docs/ANDROID.md:149 error MD040/fenced-code-language Fenced code blocks should have a language specified [Context: "```"] docs/ANDROID.md:163 error MD040/fenced-code-language Fenced code blocks should have a language specified [Context: "```"] docs/ANDROID.md:186 error MD040/fenced-code-language Fenced code blocks should have a language specified [Context: "```"] docs/ASSETS.md:155 error MD046/code-block-style Code block style [Expected: fenced; Actual: indented] docs/HISTORY.md:21 error MD025/single-title/single-h1 Multiple top-level headings in the same document [Context: " Kreative Kompas Engine (KKE)"] docs/HISTORY.md:520 error MD040/fenced-code-language Fenced code blocks should have a language specified [Context: "```"] docs/HISTORY.md:727 error MD040/fenced-code-language Fenced code blocks should have a language specified [Context: "```"] docs/HISTORY.md:734 error MD040/fenced-code-language Fenced code blocks should have a language specified [Context: "```"] docs/HISTORY.md:2031 error MD040/fenced-code-language Fenced code blocks should have a language specified [Context: "```"] docs/HISTORY.md:2090 error MD040/fenced-code-language Fenced code blocks should have a language specified [Context: "```"] docs/MODDING.md:13 error MD040/fenced-code-language Fenced code blocks should have a language specified [Context: "```"] docs/NETWORKING.md:114 error MD040/fenced-code-language Fenced code blocks should have a language specified [Context: "```"] docs/PLATFORMS.md:48 error MD040/fenced-code-language Fenced code blocks should have a language specified [Context: "```"] docs/PROCEDURAL_ANIMATION.md:36 error MD040/fenced-code-language Fenced code blocks should have a language specified [Context: "```"] docs/PROCEDURAL_ANIMATION.md:284 error MD040/fenced-code-language Fenced code blocks should have a language specified [Context: "```"] games/racing/README.md:34 error MD040/fenced-code-language Fenced code blocks should have a language specified [Context: "```"] games/racing/README.md:76:91 error MD056/table-column-count Table column count [Expected: 4; Actual: 3; Too few cells, row will be missing data] games/racing/README.md:77:89 error MD056/table-column-count Table column count [Expected: 4; Actual: 3; Too few cells, row will be missing data] … ``` </details> <details><summary>CPP · cppcheck: first lines of the output</summary> ```text See documentation on https://megalinter.io/9.4.0/descriptors/cpp_cppcheck/ ----------------------------------------------- ✅ [SUCCESS] benchmarks/kke_bench/main.cpp ✅ [SUCCESS] benchmarks/kke_benchmark/main.cpp ✅ [SUCCESS] engine/include/engine/Buffer.h ✅ [SUCCESS] engine/include/engine/Mesh.h ✅ [SUCCESS] engine/include/engine/Pipeline.h ✅ [SUCCESS] engine/include/engine/Renderer.h ✅ [SUCCESS] engine/include/engine/SwapChain.h ✅ [SUCCESS] engine/include/engine/VulkanCheck.h ✅ [SUCCESS] engine/include/engine/VulkanDevice.h ✅ [SUCCESS] engine/include/engine/Window.h ✅ [SUCCESS] engine/include/kke/AnimEvents.h ✅ [SUCCESS] engine/include/kke/AnimRig.h ✅ [SUCCESS] engine/include/kke/Animator.h ✅ [SUCCESS] engine/include/kke/Application.h ✅ [SUCCESS] engine/include/kke/AssetCatalog.h ✅ [SUCCESS] engine/include/kke/AudioMixer.h ✅ [SUCCESS] engine/include/kke/AutoRig.h ✅ [SUCCESS] engine/include/kke/BenchRecorder.h ✅ [SUCCESS] engine/include/kke/BenchmarkReport.h ✅ [SUCCESS] engine/include/kke/Bloom.h ✅ [SUCCESS] engine/include/kke/BodyShape.h ✅ [SUCCESS] engine/include/kke/BreakGraph.h ✅ [SUCCESS] engine/include/kke/Breakables.h … ``` </details> <details><summary>YAML · yamllint: first lines of the output</summary> ```text See documentation on https://megalinter.io/9.4.0/descriptors/yaml_yamllint/ ----------------------------------------------- ❌ [ERROR] for workspace /workspace/khyretos/kk-engine Linter raw log: games/goblin_horde/data/heroes.yml 53:11 error too many spaces after colon (colons) 63:11 error too many spaces after colon (colons) ``` </details> <details><summary>BASH · shellcheck: first lines of the output</summary> ```text See documentation on https://megalinter.io/9.4.0/descriptors/bash_shellcheck/ ----------------------------------------------- ❌ [ERROR] for workspace /workspace/khyretos/kk-engine Linter raw log: In tools/packaging/package.sh line 130: done < <(find "$stage" "$stage/benchmark" -maxdepth 1 -type f \( -name "*$exe" -o -name '*.dll' \) $([ -z "$exe" ] && echo "-perm -u+x") -print0) ^-- SC2046 (warning): Quote this to prevent word splitting. For more information: https://www.shellcheck.net/wiki/SC2046 -- Quote this to prevent word splitt... ``` </details> <details><summary>DOCKERFILE · hadolint: first lines of the output</summary> ```text See documentation on https://megalinter.io/9.4.0/descriptors/dockerfile_hadolint/ ----------------------------------------------- ❌ [ERROR] for workspace /workspace/khyretos/kk-engine Linter raw log: docker/android.Dockerfile:19 DL4006 warning: Set the SHELL option -o pipefail before RUN with a pipe in it. If you are using /bin/sh in an alpine image or if your shell is symlinked to busybox then consider explicitly setting your SHELL to /bin/ash, or disable this check docker/appimage.Dockerfile:38 SC2016 info: Expressions don't expand in single quotes, use double quotes for that. docker/appimage.Dockerfile:51 DL3003 warning: Use WORKDIR to switch to a directory docker/appimage.Dockerfile:57 DL3003 warning: Use WORKDIR to switch to a directory docker/appimage.Dockerfile:63 DL4006 warning: Set the SHELL option -o pipefail before RUN with a pipe in it. If you are using /bin/sh in an alpine image or if your shell is symlinked to busybox then consider explicitly setting your SHELL to /bin/ash, or disable this check docker/appimage.Dockerfile:63 DL3003 warning: Use WORKDIR to switch to a directory docker/appimage.Dockerfile:73 DL4006 warning: Set the SHELL option -o pipefail before RUN with a pipe in it. If you are using /bin/sh in an alpine image or if your shell is symlinked to busybox then consider explicitly setting your SHELL to /bin/ash, or disable this check docker/appimage.Dockerfile:73 DL3003 warning: Use WORKDIR to switch to a directory docker/ci.Dockerfile:42 DL4006 warning: Set the SHELL option -o pipefail before RUN with a pipe in it. If you are using /bin/sh in an alpine image or if your shell is symlinked to busybox then consider explicitly setting your SHELL to /bin/ash, or disable this check docker/ci.Dockerfile:56 DL4006 warning: Set the SHELL option -o pipefail before RUN with a pipe in it. If you are using /bin/sh in an alpine image or if your shell is symlinked to busybox then consider explicitly setting your SHELL to /bin/ash, or disable this check docker/server/Dockerfile:22 DL4006 warning: Set the SHELL option -o pipefail before RUN with a pipe in it. If you are using /bin/sh in an alpine image or if your shell is symlinked to busybox then consider explicitly setting your SHELL to /bin/ash, or disable this check docker/vm.Dockerfile:22 SC2086 info: Double quote to prevent globbing and word splitting. docker/vm.Dockerfile:29 DL3003 warning: Use WORKDIR to switch to a directory docker/vm.Dockerfile:29 DL4006 warning: Set the SHELL option -o pipefail before RUN with a pipe in it. If you are using /bin/sh in an alpine image or if your shell is symlinked to busybox then consider explicitly setting your SHELL to /bin/ash, or disable this check website/Dockerfile:9 DL4006 warning: Set the SHELL option -o pipefail before RUN with a pipe in it. If you are using /bin/sh in an alpine image or if your shell is symlinked to busybox then consider explicitly setting your SHELL to /bin/ash, or disable this check ``` </details> <details><summary>REPOSITORY · trivy: first lines of the output</summary> ```text See documentation on https://megalinter.io/9.4.0/descriptors/repository_trivy/ ----------------------------------------------- ❌ [ERROR] for workspace /workspace/khyretos/kk-engine Linter raw log: 2026-11-09T05:56:46Z INFO [vulndb] Need to update DB 2026-11-09T05:56:46Z INFO [vulndb] Downloading vulnerability DB... 2026-11-09T05:56:46Z INFO [vulndb] Downloading artifact... repo="mirror.gcr.io/aquasec/trivy-db:2" 10.59 MiB / 131.37 MiB [---->________________________________________________________] 8.06% ? p/s ?23.27 MiB / 131.37 MiB [---------->_________________________________________________] 17.71% ? p/s ?29.29 MiB / 131.37 MiB [------------->______________________________________________] 22.30% ? p/s ?33.57 MiB / 131.37 MiB [------------>__________________________________] 25.55% 38.45 MiB p/s ETA 2s37.87 MiB / 131.37 MiB [------------->_________________________________] 28.83% 38.45 MiB p/s ETA 2s43.27 MiB / 131.37 MiB [--------------->_______________________________] 32.94% 38.45 MiB p/s ETA 2s46.53 MiB / 131.37 MiB [---------------->______________________________] 35.42% 37.36 MiB p/s ETA 2s49.34 MiB / 131.37 MiB [----------------->_____________________________] 37.56% 37.36 MiB p/s ETA 2s52.34 MiB / 131.37 MiB [------------------>____________________________] 39.84% 37.36 MiB p/s ETA 2s56.02 MiB / 131.37 MiB [-------------------->__________________________] 42.64% 35.97 MiB p/s ETA 2s60.00 MiB / 131.37 MiB [--------------------->_________________________] 45.67% 35.97 MiB p/s ETA 1s62.40 MiB / 131.37 MiB [---------------------->________________________] 47.50% 35.97 MiB p/s ETA 1s65.02 MiB / 131.37 MiB [----------------------->_______________________] 49.50% 34.62 MiB p/s ETA 1s66.85 MiB / 131.37 MiB [----------------------->_______________________] 50.89% 34.62 MiB p/s ETA 1s69.29 MiB / 131.37 MiB [------------------------>______________________] 52.75% 34.62 MiB p/s ETA 1s75.04 MiB / 131.37 MiB [-------------------------->____________________] 57.12% 33.46 MiB p/s ETA 1s79.81 MiB / 131.37 MiB [---------------------------->__________________] 60.75% 33.46 MiB p/s ETA 1s86.03 MiB / 131.37 MiB [------------------------------>________________] 65.48% 33.46 MiB p/s ETA 1s100.69 MiB / 131.37 MiB [----------------------------------->__________] 76.65% 34.05 MiB p/s ETA 0s124.98 MiB / 131.37 MiB [------------------------------------------->__] 95.14% 34.05 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 34.05 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 35.17 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 35.17 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 35.17 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 32.90 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 32.90 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 32.90 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 30.78 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 30.78 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 30.78 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 28.79 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 28.79 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 28.79 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 26.93 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 26.93 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 26.93 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 25.19 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 25.19 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 25.19 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 23.57 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 23.57 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 23.57 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 22.05 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 22.05 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 22.05 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 20.63 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 20.63 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 20.63 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 19.30 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 19.30 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 19.30 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 18.05 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 18.05 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 18.05 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 16.89 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 16.89 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 16.89 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 15.80 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 15.80 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 15.80 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 14.78 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 14.78 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [-------------------------------------------->] 100.00% 14.78 MiB p/s ETA 0s131.37 MiB / 131.37 MiB [------------------------------------------------] 100.00% 10.45 MiB p/s 13s2026-11-09T05:56:59Z INFO [vulndb] Artifact successfully downloaded repo="mirror.gcr.io/aquasec/trivy-db:2" 2026-11-09T05:56:59Z INFO [vuln] Vulnerability scanning is enabled 2026-11-09T05:56:59Z INFO [misconfig] Misconfiguration scanning is enabled 2026-11-09T05:56:59Z INFO [checks-client] Need to update the checks bundle 2026-11-09T05:56:59Z INFO [checks-client] Downloading the checks bundle... 234.57 KiB / 234.57 KiB [------------------------------------------------------] 100.00% ? p/s 100ms2026-11-09T05:57:02Z WARN [rego] Module will be skipped as current version of Trivy is older than minimum trivy version required - please update Trivy to use this module file_path="root/.cache/trivy/policy/content/policies/cloud/policies/aws/cloudfront/enable_logging.rego" minimum_trivy_version="0.72.0" 2026-11-09T05:57:03Z ERROR [dockerfile scanner] Failed to parse file file_path="docker/server/Dockerfile.dockerignore" err="parse dockerfile instruction: parse instruction \".git\": unknown instruction: .git" 2026-11-09T05:57:04Z INFO Number of language-specific files num=0 2026-11-09T05:57:04Z INFO Detected config files num=9 Report Summary ┌──────────────────────────────┬────────────┬─────────────────┬───────────────────┐ │ Target │ Type │ Vulnerabilities │ Misconfigurations │ ├──────────────────────────────┼────────────┼─────────────────┼───────────────────┤ │ benchmarks/docker/Dockerfile │ dockerfile │ - │ 2 │ ├──────────────────────────────┼────────────┼─────────────────┼───────────────────┤ │ docker/android.Dockerfile │ dockerfile │ - │ 2 │ ├──────────────────────────────┼────────────┼─────────────────┼───────────────────┤ │ docker/appimage.Dockerfile │ dockerfile │ - │ 5 │ … ``` </details> 🧹 Formatting only (layout, no behaviour; the nightly lint-fix job applies these as a PR): YAML · prettier (57 files checked), BASH · shfmt (13 files checked) ✅ Clean: actionlint, git_diff, gitleaks, grype, jsonlint, prettier, secretlint, stylelint, trufflehog, xmllint <sub>MegaLinter on soucouyant · full logs in the Actions run · comment <code>/improve</code> for AI fix suggestions</sub>
khyretos deleted branch renovate/actions-checkout-7.x 2026-11-09 14:19:37 +01:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
deps
Renovate: patch/minor/digest update

  
deps-major
Renovate: major or 0.x minor update

  
hold
kompas-review waits until Kees replies merge

  
security
Renovate: fixes a known vulnerability

No labels
deps
deps-major
hold
security
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
4 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
khyretos/kk-engine!160
No description provided.