Dustilock, pip-compile, and "--hash" is available for public registration

[wesley-dean-flexion]

MegaLinter includes the dustilock scanner which looks for package requirements files. Some tools (e.g., pip-compile with --generate-hashes ) may produce output with continuation characters to make otherwise long lines more legible.

Unfortunately, it appears that dustilock doesn't appear to interpret line continuation correctly. This has been documented in Checkmarx/dustilock#5

One can disable dustilock with the DISABLE_LINTERS configuration directive in a .mega-linter.yml file:

DISABLE_LINTERS:
  [
    REPOSITORY_DUSTILOCK
  ]