-
-
Notifications
You must be signed in to change notification settings - Fork 269
re-enable flow scanner #6262
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
re-enable flow scanner #6262
Conversation
You mention above that you worked on publishing v5.8 (up from some v4.3x something), but I only see 5.1.0 in a repo, and 5.2.0 in another. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Couple things, and you might know more on the nature of the changes needed. Most of the work only needs to be done in the descriptor file, the rest is generated from there
@nvuillam Hi Nicolas, I hope all is well. I'd really appreciate your consideration of the RCE vulnerability and reeanabling |
@echoix Thank you so much for your prompt reply and support. I would like to clarify: Version 5.2 was the latest on NPM before being unpublished due to an RCE vulnerability, as explained in the core package. The original Lightning Flow Scanner SFDX repo has been relocated, previous references still work and functionality for MegaLinter remains unaffected. The NPM package is now patched, and it turns out we do not need to rescope, and a new version 5.6 is available at www.npmjs.com/package/lightning-flow-scanner. In short:
Based on your feedback, I tried to keep the current naming intact and decided to only update the version numbers and documentation. Could you advise on the steps needed to proceed re enabling LFS? |
"kubescape": "3.0.41", | ||
"kubeval": "0.16.1", | ||
"lightning-flow-scanner": "3.29.0", | ||
"lightning-flow-scanner-cli": "3.29.0", |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
revert
Hi @nvuillam and @llaville ,
First off, I'd really love the opportunity to contribute to MegaLinter, but its turning out to be a bit of a challenge for me!
After deprecating parts of the Lightning Flow Scanner Org and unpublishing the original sfdx version on NPM, I have continued to deliver v5.6, a more secure version. Id love to integrate this more robust version in Mega Linter, as the functionality remains the same. Thank you for your consideration and support.