Skip to content

Conversation

RubenHalman
Copy link

@RubenHalman RubenHalman commented Oct 2, 2025

Hi @nvuillam and @llaville ,

First off, I'd really love the opportunity to contribute to MegaLinter, but its turning out to be a bit of a challenge for me!
After deprecating parts of the Lightning Flow Scanner Org and unpublishing the original sfdx version on NPM, I have continued to deliver v5.6, a more secure version. Id love to integrate this more robust version in Mega Linter, as the functionality remains the same. Thank you for your consideration and support.

cursor[bot]

This comment was marked as outdated.

@echoix
Copy link
Collaborator

echoix commented Oct 2, 2025

You mention above that you worked on publishing v5.8 (up from some v4.3x something), but I only see 5.1.0 in a repo, and 5.2.0 in another.
The organization seemed to have changed, and it’s the first release (at least since a while) from a new author. Not seeing the v5.0.0 published, and not seeing the notices that show how and why the repo isn’t archived anymore, I can’t do anything but be cautious and want to understand a bit more. (You seem to be part of the history for a couple years, unless rebases have been made, so I don’t think it’s a repo hijacking, but still want to check)

Copy link
Collaborator

@echoix echoix left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Couple things, and you might know more on the nature of the changes needed. Most of the work only needs to be done in the descriptor file, the rest is generated from there

cursor[bot]

This comment was marked as outdated.

cursor[bot]

This comment was marked as outdated.

cursor[bot]

This comment was marked as outdated.

cursor[bot]

This comment was marked as outdated.

cursor[bot]

This comment was marked as outdated.

cursor[bot]

This comment was marked as outdated.

@RubenHalman
Copy link
Author

RubenHalman commented Oct 4, 2025

@nvuillam Hi Nicolas, I hope all is well. I'd really appreciate your consideration of the RCE vulnerability and reeanabling

cursor[bot]

This comment was marked as outdated.

@RubenHalman RubenHalman requested a review from echoix October 5, 2025 01:29
@RubenHalman RubenHalman marked this pull request as draft October 6, 2025 14:00
@RubenHalman
Copy link
Author

@echoix Thank you so much for your prompt reply and support. I would like to clarify:

Version 5.2 was the latest on NPM before being unpublished due to an RCE vulnerability, as explained in the core package. The original Lightning Flow Scanner SFDX repo has been relocated, previous references still work and functionality for MegaLinter remains unaffected. The NPM package is now patched, and it turns out we do not need to rescope, and a new version 5.6 is available at www.npmjs.com/package/lightning-flow-scanner.

In short:

  • Lightning Flow Scanner can be re enabled with v5.6.2
  • The Microsoft marketplace name has changed, and related documentation has been updated.

Based on your feedback, I tried to keep the current naming intact and decided to only update the version numbers and documentation. Could you advise on the steps needed to proceed re enabling LFS?

@RubenHalman RubenHalman marked this pull request as ready for review October 6, 2025 14:43
@RubenHalman RubenHalman marked this pull request as draft October 10, 2025 16:50
"kubescape": "3.0.41",
"kubeval": "0.16.1",
"lightning-flow-scanner": "3.29.0",
"lightning-flow-scanner-cli": "3.29.0",
Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

revert

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants