Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remove the gosec Makefile target. #4207

Merged
merged 1 commit into from
Sep 2, 2021
Merged

Conversation

dlorenc
Copy link
Contributor

@dlorenc dlorenc commented Sep 1, 2021

Changes

This is not managed by golangci-lint, which does it's own verisoning. The
version in golangci-lint likely won't match this version, so they're most likely
mismatched anyway.

Given that this Makefile target isn't used, we should drop it in favor of make golangci-lint
for consistency.

Signed-off-by: Dan Lorenc [email protected]

Submitter Checklist

As the author of this PR, please check off the items in this checklist:

  • Docs included if any changes are user facing
  • Tests included if any functionality added or changed
  • Follows the commit message standard
  • Meets the Tekton contributor standards (including
    functionality, content, code)
  • Release notes block below has been filled in or deleted (only if no user facing changes)

Release Notes

NONE

@tekton-robot tekton-robot added the release-note-none Denotes a PR that doesnt merit a release note. label Sep 1, 2021
@tekton-robot tekton-robot added the size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. label Sep 1, 2021
@dlorenc
Copy link
Contributor Author

dlorenc commented Sep 1, 2021

/kind cleanup

@tekton-robot tekton-robot added the kind/cleanup Categorizes issue or PR as related to cleaning up code, process, or technical debt. label Sep 1, 2021
Copy link
Member

@mattmoor mattmoor left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/lgtm

@tekton-robot tekton-robot added the lgtm Indicates that a PR is ready to be merged. label Sep 1, 2021
@vdemeester
Copy link
Member

This is not managed by golangci-lint, which does it's own verisoning. The
version in golangci-lint likely won't match this version, so they're most likely
mismatched anyway.

Given that this Makefile target isn't used, we should drop it in favor of make golangci-lint
for consistency.

So quick note, Makefile is not used anywhere in the CI (yet ? 😛). This would be true for other checks target that are in the Makefile (notably errcheck).

Those were added at a time where they weren't enabled in the golangci-lint configuration, so that a developer could run a one-sot on it's own, or in the case of gosec, to run them on _test.go even if they are disabled by teh golangci-lint configuration.

For me, golangci-lint is made to make sure we can run the same set of checks on the CI and locally. Even though this is not even guaranteed to be true as, golangci-lint version here and on the CI might differ 🙃. But anyway, in my opinion, nothing should prevent us to add more checks on the Makefile (or as scripts, …) for the developers.

@dlorenc
Copy link
Contributor Author

dlorenc commented Sep 1, 2021

So quick note, Makefile is not used anywhere in the CI (yet ? 😛). This would be true for other checks target that are in the Makefile (notably errcheck).

Yep, I was using this to test out golangci-lint updates locally before they make their way through plumbing and into CI. It's nice to be able to change this somewhat independently. The gosec one confused me because it was already out of sync with the one in golangci-lint, so I was seeing different output.

@vdemeester
Copy link
Member

/approve

@tekton-robot
Copy link
Collaborator

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: mattmoor, vdemeester

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@tekton-robot tekton-robot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Sep 1, 2021
This is not managed by golangci-lint, which does it's own verisoning. The
version in golangci-lint likely won't match this version, so they're most likely
mismatched anyway.

Given that this Makefile target isn't used, we should drop it in favor of `make golangci-lint`
for consistency.

Signed-off-by: Dan Lorenc <[email protected]>
@tekton-robot tekton-robot removed the lgtm Indicates that a PR is ready to be merged. label Sep 1, 2021
@dlorenc
Copy link
Contributor Author

dlorenc commented Sep 2, 2021

Rebased, needs another LGTM.

Copy link
Member

@afrittoli afrittoli left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/lgtm

@tekton-robot tekton-robot added the lgtm Indicates that a PR is ready to be merged. label Sep 2, 2021
@tekton-robot tekton-robot merged commit f041ef5 into tektoncd:main Sep 2, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
approved Indicates a PR has been approved by an approver from all required OWNERS files. kind/cleanup Categorizes issue or PR as related to cleaning up code, process, or technical debt. lgtm Indicates that a PR is ready to be merged. release-note-none Denotes a PR that doesnt merit a release note. size/XS Denotes a PR that changes 0-9 lines, ignoring generated files.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants