mega-linter-runner 9.5.0 → 9.6.0

package/generators/mega-linter/templates/bitbucket-pipelines.yml

@@ -4,22 +4,23 @@
 image: atlassian/default-image:5
 
 pipelines:
-  default:
-    - parallel:
-        - step:
-            name: Run MegaLinter
-            image: <%= DOCKER_IMAGE_NAME %>:<%= DOCKER_IMAGE_VERSION %>
-            script:
-              # Disable LLM Advisor for bot PRs (dependabot, renovate, etc.)
-              # Note: Bitbucket has limited access to PR metadata, this is a basic check
-              - |
-                if [[ "$BITBUCKET_BRANCH" =~ ^(dependabot|renovate)/ ]] ||
-                   [[ "$BITBUCKET_PR_TITLE" =~ ^(chore|fix|deps?|bump)(\(.*\))?: ]] ||
-                   [[ "$BITBUCKET_STEP_TRIGGERER_UUID" =~ dependabot|renovate ]]; then
-                  export LLM_ADVISOR_ENABLED=false
-                else
-                  export LLM_ADVISOR_ENABLED=true
-                fi
-              - export DEFAULT_WORKSPACE=$BITBUCKET_CLONE_DIR && bash /entrypoint.sh
-            artifacts:
-              - megalinter-reports/**
+  pull-requests: # Note: Bitbucket PR comment reporting requires pull request context
+    "**": # Run on PRs for any branch (the source branch of the pull request)
+      - parallel:
+          - step:
+              name: Run MegaLinter
+              image: <%= DOCKER_IMAGE_NAME %>:<%= DOCKER_IMAGE_VERSION %>
+              script:
+                # Disable LLM Advisor for bot PRs (dependabot, renovate, etc.)
+                # Note: Bitbucket has limited access to PR metadata, this is a basic check
+                - |
+                  if [[ "$BITBUCKET_BRANCH" =~ ^(dependabot|renovate)/ ]] ||
+                     [[ "$BITBUCKET_PR_TITLE" =~ ^(chore|fix|deps?|bump)(\(.*\))?: ]] ||
+                     [[ "$BITBUCKET_STEP_TRIGGERER_UUID" =~ dependabot|renovate ]]; then
+                    export LLM_ADVISOR_ENABLED=false
+                  else
+                    export LLM_ADVISOR_ENABLED=true
+                  fi
+                - export DEFAULT_WORKSPACE=$BITBUCKET_CLONE_DIR && bash /entrypoint.sh
+              artifacts:
+                - megalinter-reports/**

package/generators/mega-linter/templates/mega-linter.yml

@@ -136,7 +136,7 @@ jobs:
       # Create pull request if applicable
       # (for now works only on PR from same repository, not from forks)
       - name: Create Pull Request with applied fixes
-        uses: peter-evans/create-pull-request@v7
+        uses: peter-evans/create-pull-request@v8
         id: cpr
         if: >-
           steps.ml.outputs.has_updated_sources == 1 &&

package/generators/mega-linter-custom-flavor/templates/action.yml

@@ -9,9 +9,6 @@ runs:
   using: "docker"
   # You can manually update the Docker image version here, or use the latest tag
   image: "docker://<%= DOCKER_IMAGE_VERSION %>"
-  args:
-    - "-v"
-    - "/var/run/docker.sock:/var/run/docker.sock:rw"
 branding:
   icon: "check"
   color: "green"

package/lib/cli.js

@@ -1,4 +1,3 @@
-#! /usr/bin/env node
 import { MegaLinterRunner } from "./runner.js";
 import {optionsDefinition} from "./options.js";
 

package/lib/megalinter-vars.json

@@ -1,6 +1,6 @@
 {
   "_meta": {
-    "variable_count": 2363,
+    "variable_count": 2375,
     "categories": {
       "ACTION": 4,
       "ACTION_ACTIONLINT": 16,
@@ -54,7 +54,7 @@
       "ENV": 4,
       "ENV_DOTENV_LINTER": 13,
       "FILEIO_REPORTER": 2,
-      "GENERAL": 51,
+      "GENERAL": 52,
       "GHERKIN": 4,
       "GHERKIN_GHERKIN_LINT": 15,
       "GITHUB_COMMENT_REPORTER": 5,
@@ -135,6 +135,7 @@
       "RAKU": 4,
       "RAKU_RAKU": 15,
       "REPOSITORY": 12,
+      "REPOSITORY_BETTERLEAKS": 11,
       "REPOSITORY_CHECKOV": 11,
       "REPOSITORY_DEVSKIM": 11,
       "REPOSITORY_DUSTILOCK": 9,
@@ -1218,6 +1219,7 @@
         "PYTHON_RUFF",
         "PYTHON_RUFF_FORMAT",
         "RAKU_RAKU",
+        "REPOSITORY_BETTERLEAKS",
         "REPOSITORY_CHECKOV",
         "REPOSITORY_DEVSKIM",
         "REPOSITORY_DUSTILOCK",
@@ -5906,6 +5908,7 @@
         "PYTHON_RUFF",
         "PYTHON_RUFF_FORMAT",
         "RAKU_RAKU",
+        "REPOSITORY_BETTERLEAKS",
         "REPOSITORY_CHECKOV",
         "REPOSITORY_DEVSKIM",
         "REPOSITORY_DUSTILOCK",
@@ -6071,6 +6074,7 @@
         "PYTHON_RUFF",
         "PYTHON_RUFF_FORMAT",
         "RAKU_RAKU",
+        "REPOSITORY_BETTERLEAKS",
         "REPOSITORY_CHECKOV",
         "REPOSITORY_DEVSKIM",
         "REPOSITORY_DUSTILOCK",
@@ -6864,6 +6868,19 @@
         "YAML"
       ]
     },
+    "ENABLE_DISABLE_LINTERS_PRIORITY": {
+      "name": "ENABLE_DISABLE_LINTERS_PRIORITY",
+      "type": "string",
+      "title": "ENABLE_LINTERS / DISABLE_LINTERS priority",
+      "description": "Defines which list wins when a linter is present in both ENABLE_LINTERS and DISABLE_LINTERS. ENABLE (default) keeps the linter active, DISABLE lets DISABLE_LINTERS override ENABLE_LINTERS (useful to trim an inherited ENABLE_LINTERS list via EXTENDS)",
+      "default": "ENABLE",
+      "enum": [
+        "ENABLE",
+        "DISABLE"
+      ],
+      "category": "GENERAL",
+      "section": "ACTIVATION"
+    },
     "ENABLE_ERRORS_LINTERS": {
       "name": "ENABLE_ERRORS_LINTERS",
       "type": "array",
@@ -6967,6 +6984,7 @@
         "PYTHON_RUFF",
         "PYTHON_RUFF_FORMAT",
         "RAKU_RAKU",
+        "REPOSITORY_BETTERLEAKS",
         "REPOSITORY_CHECKOV",
         "REPOSITORY_DEVSKIM",
         "REPOSITORY_DUSTILOCK",
@@ -7132,6 +7150,7 @@
         "PYTHON_RUFF",
         "PYTHON_RUFF_FORMAT",
         "RAKU_RAKU",
+        "REPOSITORY_BETTERLEAKS",
         "REPOSITORY_CHECKOV",
         "REPOSITORY_DEVSKIM",
         "REPOSITORY_DUSTILOCK",
@@ -10073,7 +10092,7 @@
         "array",
         "string"
       ],
-      "title": "JSON_ESLINT_PLUGIN_JSONC: Custom arguments",
+      "title": "(deprecated) JSON_ESLINT_PLUGIN_JSONC: Custom arguments",
       "description": "JSON_ESLINT_PLUGIN_JSONC: User custom arguments to add in linter CLI call",
       "category": "JSON_ESLINT_PLUGIN_JSONC",
       "section": "LINTER_COMMAND",
@@ -10082,7 +10101,7 @@
     "JSON_ESLINT_PLUGIN_JSONC_CLI_EXECUTABLE": {
       "name": "JSON_ESLINT_PLUGIN_JSONC_CLI_EXECUTABLE",
       "type": "array",
-      "title": "JSON_ESLINT_PLUGIN_JSONC: CLI Executable",
+      "title": "(deprecated) JSON_ESLINT_PLUGIN_JSONC: CLI Executable",
       "description": "JSON_ESLINT_PLUGIN_JSONC: Override CLI executable used to build the linter command line (rarely needed)",
       "default": [
         [
@@ -10096,7 +10115,7 @@
     "JSON_ESLINT_PLUGIN_JSONC_CLI_LINT_MODE": {
       "name": "JSON_ESLINT_PLUGIN_JSONC_CLI_LINT_MODE",
       "type": "string",
-      "title": "JSON_ESLINT_PLUGIN_JSONC: CLI lint mode",
+      "title": "(deprecated) JSON_ESLINT_PLUGIN_JSONC: CLI lint mode",
       "description": "JSON_ESLINT_PLUGIN_JSONC: Override default CLI lint mode used to call the linter (rarely needed)",
       "default": "list_of_files",
       "enum": [
@@ -10113,7 +10132,7 @@
         "array",
         "string"
       ],
-      "title": "JSON_ESLINT_PLUGIN_JSONC: Custom remove arguments",
+      "title": "(deprecated) JSON_ESLINT_PLUGIN_JSONC: Custom remove arguments",
       "description": "JSON_ESLINT_PLUGIN_JSONC: User custom arguments to remove before calling linter",
       "category": "JSON_ESLINT_PLUGIN_JSONC",
       "section": "LINTER_COMMAND",
@@ -10122,7 +10141,7 @@
     "JSON_ESLINT_PLUGIN_JSONC_CONFIG_FILE": {
       "name": "JSON_ESLINT_PLUGIN_JSONC_CONFIG_FILE",
       "type": "string",
-      "title": "JSON_ESLINT_PLUGIN_JSONC: Custom config file name",
+      "title": "(deprecated) JSON_ESLINT_PLUGIN_JSONC: Custom config file name",
       "description": "JSON_ESLINT_PLUGIN_JSONC: User custom config file name if different from default",
       "default": ".eslintrc-json.json",
       "category": "JSON_ESLINT_PLUGIN_JSONC",
@@ -10131,7 +10150,7 @@
     "JSON_ESLINT_PLUGIN_JSONC_DISABLE_ERRORS": {
       "name": "JSON_ESLINT_PLUGIN_JSONC_DISABLE_ERRORS",
       "type": "boolean",
-      "title": "JSON_ESLINT_PLUGIN_JSONC: Disable errors",
+      "title": "(deprecated) JSON_ESLINT_PLUGIN_JSONC: Disable errors",
       "description": "JSON_ESLINT_PLUGIN_JSONC: If true, JSON_ESLINT_PLUGIN_JSONC doesn't make MegaLinter fail even if errors are found",
       "default": false,
       "category": "JSON_ESLINT_PLUGIN_JSONC",
@@ -10140,7 +10159,7 @@
     "JSON_ESLINT_PLUGIN_JSONC_DISABLE_ERRORS_IF_LESS_THAN": {
       "name": "JSON_ESLINT_PLUGIN_JSONC_DISABLE_ERRORS_IF_LESS_THAN",
       "type": "number",
-      "title": "JSON_ESLINT_PLUGIN_JSONC: Maximum number of errors allowed",
+      "title": "(deprecated) JSON_ESLINT_PLUGIN_JSONC: Maximum number of errors allowed",
       "description": "JSON_ESLINT_PLUGIN_JSONC: If the number of errors found is less than this value, JSON_ESLINT_PLUGIN_JSONC doesn't make MegaLinter fail",
       "default": 0,
       "category": "JSON_ESLINT_PLUGIN_JSONC",
@@ -10149,7 +10168,7 @@
     "JSON_ESLINT_PLUGIN_JSONC_FILE_EXTENSIONS": {
       "name": "JSON_ESLINT_PLUGIN_JSONC_FILE_EXTENSIONS",
       "type": "array",
-      "title": "JSON_ESLINT_PLUGIN_JSONC: Matching files extensions",
+      "title": "(deprecated) JSON_ESLINT_PLUGIN_JSONC: Matching files extensions",
       "description": "JSON_ESLINT_PLUGIN_JSONC: Override descriptor/linter matching files extensions that will be used to select files to lint",
       "default": [
         ".json",
@@ -10167,7 +10186,7 @@
     "JSON_ESLINT_PLUGIN_JSONC_FILE_NAMES_REGEX": {
       "name": "JSON_ESLINT_PLUGIN_JSONC_FILE_NAMES_REGEX",
       "type": "array",
-      "title": "JSON_ESLINT_PLUGIN_JSONC: Matching file name regexes",
+      "title": "(deprecated) JSON_ESLINT_PLUGIN_JSONC: Matching file name regexes",
       "description": "JSON_ESLINT_PLUGIN_JSONC: Override descriptor/linter matching file name regexes that will be used to select files to lint",
       "default": [],
       "examples": [
@@ -10181,7 +10200,7 @@
     "JSON_ESLINT_PLUGIN_JSONC_FILTER_REGEX_EXCLUDE": {
       "name": "JSON_ESLINT_PLUGIN_JSONC_FILTER_REGEX_EXCLUDE",
       "type": "string",
-      "title": "JSON_ESLINT_PLUGIN_JSONC: Excluding Regex",
+      "title": "(deprecated) JSON_ESLINT_PLUGIN_JSONC: Excluding Regex",
       "description": "JSON_ESLINT_PLUGIN_JSONC: Custom regex excluding filter: files matching this regex will NOT be linted",
       "category": "JSON_ESLINT_PLUGIN_JSONC",
       "section": "SCOPE"
@@ -10189,7 +10208,7 @@
     "JSON_ESLINT_PLUGIN_JSONC_FILTER_REGEX_INCLUDE": {
       "name": "JSON_ESLINT_PLUGIN_JSONC_FILTER_REGEX_INCLUDE",
       "type": "string",
-      "title": "JSON_ESLINT_PLUGIN_JSONC: Including Regex",
+      "title": "(deprecated) JSON_ESLINT_PLUGIN_JSONC: Including Regex",
       "description": "JSON_ESLINT_PLUGIN_JSONC: Custom regex including filter: only files matching this regex will be linted",
       "category": "JSON_ESLINT_PLUGIN_JSONC",
       "section": "SCOPE"
@@ -10198,7 +10217,7 @@
       "name": "JSON_ESLINT_PLUGIN_JSONC_POST_COMMANDS",
       "type": "array",
       "title": "JSON_ESLINT_PLUGIN_JSONC: Post-run commands",
-      "description": "JSON_ESLINT_PLUGIN_JSONC: Define bash commands to run after running JSON_ESLINT_PLUGIN_JSONC",
+      "description": "(deprecated) JSON_ESLINT_PLUGIN_JSONC: Define bash commands to run after running JSON_ESLINT_PLUGIN_JSONC",
       "examples": [
         [
           {
@@ -10215,7 +10234,7 @@
       "name": "JSON_ESLINT_PLUGIN_JSONC_PRE_COMMANDS",
       "type": "array",
       "title": "JSON_ESLINT_PLUGIN_JSONC: Pre-run commands",
-      "description": "JSON_ESLINT_PLUGIN_JSONC: Define bash commands to run before running JSON_ESLINT_PLUGIN_JSONC",
+      "description": "(deprecated) JSON_ESLINT_PLUGIN_JSONC: Define bash commands to run before running JSON_ESLINT_PLUGIN_JSONC",
       "examples": [
         [
           {
@@ -10231,7 +10250,7 @@
     "JSON_ESLINT_PLUGIN_JSONC_RULES_PATH": {
       "name": "JSON_ESLINT_PLUGIN_JSONC_RULES_PATH",
       "type": "string",
-      "title": "JSON_ESLINT_PLUGIN_JSONC: Custom config file path",
+      "title": "(deprecated) JSON_ESLINT_PLUGIN_JSONC: Custom config file path",
       "description": "JSON_ESLINT_PLUGIN_JSONC: Path where to find linter configuration file",
       "category": "JSON_ESLINT_PLUGIN_JSONC",
       "section": "LINTER_COMMAND"
@@ -10239,7 +10258,7 @@
     "JSON_ESLINT_PLUGIN_JSONC_UNSECURED_ENV_VARIABLES": {
       "name": "JSON_ESLINT_PLUGIN_JSONC_UNSECURED_ENV_VARIABLES",
       "type": "array",
-      "title": "JSON_ESLINT_PLUGIN_JSONC: Unsecured env variables",
+      "title": "(deprecated) JSON_ESLINT_PLUGIN_JSONC: Unsecured env variables",
       "description": "List of env variables explicitly not filtered before calling JSON_ESLINT_PLUGIN_JSONC and its pre/post commands",
       "default": [],
       "category": "JSON_ESLINT_PLUGIN_JSONC",
@@ -12619,6 +12638,7 @@
         "PYTHON_RUFF",
         "PYTHON_RUFF_FORMAT",
         "RAKU_RAKU",
+        "REPOSITORY_BETTERLEAKS",
         "REPOSITORY_CHECKOV",
         "REPOSITORY_DEVSKIM",
         "REPOSITORY_DUSTILOCK",
@@ -12797,6 +12817,7 @@
         "PYTHON_RUFF",
         "PYTHON_RUFF_FORMAT",
         "RAKU_RAKU",
+        "REPOSITORY_BETTERLEAKS",
         "REPOSITORY_CHECKOV",
         "REPOSITORY_DEVSKIM",
         "REPOSITORY_DUSTILOCK",
@@ -16189,7 +16210,7 @@
       "description": "POWERSHELL_POWERSHELL: Override CLI executable used to build the linter command line (rarely needed)",
       "default": [
         [
-          "powershell"
+          "pwsh"
         ]
       ],
       "category": "POWERSHELL_POWERSHELL",
@@ -16319,7 +16340,7 @@
       "description": "POWERSHELL_POWERSHELL_FORMATTER: Override CLI executable used to build the linter command line (rarely needed)",
       "default": [
         [
-          "powershell"
+          "pwsh"
         ]
       ],
       "category": "POWERSHELL_POWERSHELL_FORMATTER",
@@ -19171,6 +19192,137 @@
       "category": "GENERAL",
       "section": "OUTPUT"
     },
+    "REPOSITORY_BETTERLEAKS_ARGUMENTS": {
+      "name": "REPOSITORY_BETTERLEAKS_ARGUMENTS",
+      "type": [
+        "array",
+        "string"
+      ],
+      "title": "REPOSITORY_BETTERLEAKS: Custom arguments",
+      "description": "REPOSITORY_BETTERLEAKS: User custom arguments to add in linter CLI call",
+      "category": "REPOSITORY_BETTERLEAKS",
+      "section": "LINTER_COMMAND",
+      "items_type": "string"
+    },
+    "REPOSITORY_BETTERLEAKS_CLI_EXECUTABLE": {
+      "name": "REPOSITORY_BETTERLEAKS_CLI_EXECUTABLE",
+      "type": "array",
+      "title": "REPOSITORY_BETTERLEAKS: CLI Executable",
+      "description": "REPOSITORY_BETTERLEAKS: Override CLI executable used to build the linter command line (rarely needed)",
+      "default": [
+        [
+          "betterleaks"
+        ]
+      ],
+      "category": "REPOSITORY_BETTERLEAKS",
+      "section": "LINTER_COMMAND",
+      "items_type": "string"
+    },
+    "REPOSITORY_BETTERLEAKS_CLI_LINT_MODE": {
+      "name": "REPOSITORY_BETTERLEAKS_CLI_LINT_MODE",
+      "type": "string",
+      "title": "REPOSITORY_BETTERLEAKS: CLI lint mode",
+      "description": "REPOSITORY_BETTERLEAKS: Override default CLI lint mode used to call the linter (rarely needed)",
+      "default": "project",
+      "enum": [
+        "file",
+        "list_of_files",
+        "project"
+      ],
+      "category": "REPOSITORY_BETTERLEAKS",
+      "section": "LINTER_COMMAND"
+    },
+    "REPOSITORY_BETTERLEAKS_COMMAND_REMOVE_ARGUMENTS": {
+      "name": "REPOSITORY_BETTERLEAKS_COMMAND_REMOVE_ARGUMENTS",
+      "type": [
+        "array",
+        "string"
+      ],
+      "title": "REPOSITORY_BETTERLEAKS: Custom remove arguments",
+      "description": "REPOSITORY_BETTERLEAKS: User custom arguments to remove before calling linter",
+      "category": "REPOSITORY_BETTERLEAKS",
+      "section": "LINTER_COMMAND",
+      "items_type": "string"
+    },
+    "REPOSITORY_BETTERLEAKS_CONFIG_FILE": {
+      "name": "REPOSITORY_BETTERLEAKS_CONFIG_FILE",
+      "type": "string",
+      "title": "REPOSITORY_BETTERLEAKS: Custom config file name",
+      "description": "REPOSITORY_BETTERLEAKS: User custom config file name if different from default",
+      "default": ".betterleaks.toml",
+      "category": "REPOSITORY_BETTERLEAKS",
+      "section": "LINTER_COMMAND"
+    },
+    "REPOSITORY_BETTERLEAKS_DISABLE_ERRORS": {
+      "name": "REPOSITORY_BETTERLEAKS_DISABLE_ERRORS",
+      "type": "boolean",
+      "title": "REPOSITORY_BETTERLEAKS: Disable errors",
+      "description": "REPOSITORY_BETTERLEAKS: If true, REPOSITORY_BETTERLEAKS doesn't make MegaLinter fail even if errors are found",
+      "default": false,
+      "category": "REPOSITORY_BETTERLEAKS",
+      "section": "ERRORS"
+    },
+    "REPOSITORY_BETTERLEAKS_DISABLE_ERRORS_IF_LESS_THAN": {
+      "name": "REPOSITORY_BETTERLEAKS_DISABLE_ERRORS_IF_LESS_THAN",
+      "type": "number",
+      "title": "REPOSITORY_BETTERLEAKS: Maximum number of errors allowed",
+      "description": "REPOSITORY_BETTERLEAKS: If the number of errors found is less than this value, REPOSITORY_BETTERLEAKS doesn't make MegaLinter fail",
+      "default": 0,
+      "category": "REPOSITORY_BETTERLEAKS",
+      "section": "ERRORS"
+    },
+    "REPOSITORY_BETTERLEAKS_POST_COMMANDS": {
+      "name": "REPOSITORY_BETTERLEAKS_POST_COMMANDS",
+      "type": "array",
+      "title": "REPOSITORY_BETTERLEAKS: Post-run commands",
+      "description": "REPOSITORY_BETTERLEAKS: Define bash commands to run after running REPOSITORY_BETTERLEAKS",
+      "examples": [
+        [
+          {
+            "command": "npm run test",
+            "continue_if_failed": false,
+            "cwd": "workspace"
+          }
+        ]
+      ],
+      "category": "REPOSITORY_BETTERLEAKS",
+      "section": "PREPOSTCOMMANDS"
+    },
+    "REPOSITORY_BETTERLEAKS_PRE_COMMANDS": {
+      "name": "REPOSITORY_BETTERLEAKS_PRE_COMMANDS",
+      "type": "array",
+      "title": "REPOSITORY_BETTERLEAKS: Pre-run commands",
+      "description": "REPOSITORY_BETTERLEAKS: Define bash commands to run before running REPOSITORY_BETTERLEAKS",
+      "examples": [
+        [
+          {
+            "command": "tflint --init",
+            "continue_if_failed": false,
+            "cwd": "workspace"
+          }
+        ]
+      ],
+      "category": "REPOSITORY_BETTERLEAKS",
+      "section": "PREPOSTCOMMANDS"
+    },
+    "REPOSITORY_BETTERLEAKS_RULES_PATH": {
+      "name": "REPOSITORY_BETTERLEAKS_RULES_PATH",
+      "type": "string",
+      "title": "REPOSITORY_BETTERLEAKS: Custom config file path",
+      "description": "REPOSITORY_BETTERLEAKS: Path where to find linter configuration file",
+      "category": "REPOSITORY_BETTERLEAKS",
+      "section": "LINTER_COMMAND"
+    },
+    "REPOSITORY_BETTERLEAKS_UNSECURED_ENV_VARIABLES": {
+      "name": "REPOSITORY_BETTERLEAKS_UNSECURED_ENV_VARIABLES",
+      "type": "array",
+      "title": "REPOSITORY_BETTERLEAKS: Unsecured env variables",
+      "description": "List of env variables explicitly not filtered before calling REPOSITORY_BETTERLEAKS and its pre/post commands",
+      "default": [],
+      "category": "REPOSITORY_BETTERLEAKS",
+      "section": "SECURITY",
+      "items_type": "string"
+    },
     "REPOSITORY_CHECKOV_ARGUMENTS": {
       "name": "REPOSITORY_CHECKOV_ARGUMENTS",
       "type": [
@@ -19569,7 +19721,7 @@
         "array",
         "string"
       ],
-      "title": "REPOSITORY_GITLEAKS: Custom arguments",
+      "title": "(deprecated) REPOSITORY_GITLEAKS: Custom arguments",
       "description": "REPOSITORY_GITLEAKS: User custom arguments to add in linter CLI call",
       "category": "REPOSITORY_GITLEAKS",
       "section": "LINTER_COMMAND",
@@ -19578,7 +19730,7 @@
     "REPOSITORY_GITLEAKS_CLI_EXECUTABLE": {
       "name": "REPOSITORY_GITLEAKS_CLI_EXECUTABLE",
       "type": "array",
-      "title": "REPOSITORY_GITLEAKS: CLI Executable",
+      "title": "(deprecated) REPOSITORY_GITLEAKS: CLI Executable",
       "description": "REPOSITORY_GITLEAKS: Override CLI executable used to build the linter command line (rarely needed)",
       "default": [
         [
@@ -19592,7 +19744,7 @@
     "REPOSITORY_GITLEAKS_CLI_LINT_MODE": {
       "name": "REPOSITORY_GITLEAKS_CLI_LINT_MODE",
       "type": "string",
-      "title": "REPOSITORY_GITLEAKS: CLI lint mode",
+      "title": "(deprecated) REPOSITORY_GITLEAKS: CLI lint mode",
       "description": "REPOSITORY_GITLEAKS: Override default CLI lint mode used to call the linter (rarely needed)",
       "default": "project",
       "enum": [
@@ -19609,7 +19761,7 @@
         "array",
         "string"
       ],
-      "title": "REPOSITORY_GITLEAKS: Custom remove arguments",
+      "title": "(deprecated) REPOSITORY_GITLEAKS: Custom remove arguments",
       "description": "REPOSITORY_GITLEAKS: User custom arguments to remove before calling linter",
       "category": "REPOSITORY_GITLEAKS",
       "section": "LINTER_COMMAND",
@@ -19618,7 +19770,7 @@
     "REPOSITORY_GITLEAKS_CONFIG_FILE": {
       "name": "REPOSITORY_GITLEAKS_CONFIG_FILE",
       "type": "string",
-      "title": "REPOSITORY_GITLEAKS: Custom config file name",
+      "title": "(deprecated) REPOSITORY_GITLEAKS: Custom config file name",
       "description": "REPOSITORY_GITLEAKS: User custom config file name if different from default",
       "default": ".gitleaks.toml",
       "category": "REPOSITORY_GITLEAKS",
@@ -19627,7 +19779,7 @@
     "REPOSITORY_GITLEAKS_DISABLE_ERRORS": {
       "name": "REPOSITORY_GITLEAKS_DISABLE_ERRORS",
       "type": "boolean",
-      "title": "REPOSITORY_GITLEAKS: Disable errors",
+      "title": "(deprecated) REPOSITORY_GITLEAKS: Disable errors",
       "description": "REPOSITORY_GITLEAKS: If true, REPOSITORY_GITLEAKS doesn't make MegaLinter fail even if errors are found",
       "default": false,
       "category": "REPOSITORY_GITLEAKS",
@@ -19636,7 +19788,7 @@
     "REPOSITORY_GITLEAKS_DISABLE_ERRORS_IF_LESS_THAN": {
       "name": "REPOSITORY_GITLEAKS_DISABLE_ERRORS_IF_LESS_THAN",
       "type": "number",
-      "title": "REPOSITORY_GITLEAKS: Maximum number of errors allowed",
+      "title": "(deprecated) REPOSITORY_GITLEAKS: Maximum number of errors allowed",
       "description": "REPOSITORY_GITLEAKS: If the number of errors found is less than this value, REPOSITORY_GITLEAKS doesn't make MegaLinter fail",
       "default": 0,
       "category": "REPOSITORY_GITLEAKS",
@@ -19646,7 +19798,7 @@
       "name": "REPOSITORY_GITLEAKS_POST_COMMANDS",
       "type": "array",
       "title": "REPOSITORY_GITLEAKS: Post-run commands",
-      "description": "REPOSITORY_GITLEAKS: Define bash commands to run after running REPOSITORY_GITLEAKS",
+      "description": "(deprecated) REPOSITORY_GITLEAKS: Define bash commands to run after running REPOSITORY_GITLEAKS",
       "examples": [
         [
           {
@@ -19663,7 +19815,7 @@
       "name": "REPOSITORY_GITLEAKS_PRE_COMMANDS",
       "type": "array",
       "title": "REPOSITORY_GITLEAKS: Pre-run commands",
-      "description": "REPOSITORY_GITLEAKS: Define bash commands to run before running REPOSITORY_GITLEAKS",
+      "description": "(deprecated) REPOSITORY_GITLEAKS: Define bash commands to run before running REPOSITORY_GITLEAKS",
       "examples": [
         [
           {
@@ -19703,7 +19855,7 @@
     "REPOSITORY_GITLEAKS_RULES_PATH": {
       "name": "REPOSITORY_GITLEAKS_RULES_PATH",
       "type": "string",
-      "title": "REPOSITORY_GITLEAKS: Custom config file path",
+      "title": "(deprecated) REPOSITORY_GITLEAKS: Custom config file path",
       "description": "REPOSITORY_GITLEAKS: Path where to find linter configuration file",
       "category": "REPOSITORY_GITLEAKS",
       "section": "LINTER_COMMAND"
@@ -19711,7 +19863,7 @@
     "REPOSITORY_GITLEAKS_UNSECURED_ENV_VARIABLES": {
       "name": "REPOSITORY_GITLEAKS_UNSECURED_ENV_VARIABLES",
       "type": "array",
-      "title": "REPOSITORY_GITLEAKS: Unsecured env variables",
+      "title": "(deprecated) REPOSITORY_GITLEAKS: Unsecured env variables",
       "description": "List of env variables explicitly not filtered before calling REPOSITORY_GITLEAKS and its pre/post commands",
       "default": [],
       "category": "REPOSITORY_GITLEAKS",
@@ -24042,6 +24194,7 @@
         "PYTHON_RUFF",
         "PYTHON_RUFF_FORMAT",
         "RAKU_RAKU",
+        "REPOSITORY_BETTERLEAKS",
         "REPOSITORY_CHECKOV",
         "REPOSITORY_DEVSKIM",
         "REPOSITORY_DUSTILOCK",
@@ -25582,7 +25735,7 @@
       "type": "string",
       "title": "SPELL_PROSELINT: Custom config file name",
       "description": "SPELL_PROSELINT: User custom config file name if different from default",
-      "default": ".proselintrc",
+      "default": ".proselintrc.json",
       "category": "SPELL_PROSELINT",
       "section": "LINTER_COMMAND"
     },

package/lib/options.js

@@ -188,6 +188,12 @@ export const optionsDefinition = optionator.default({
       description:
         "Upgrade the local MegaLinter configuration (.mega-linter.yml and related CI files) to the current major version.",
     },
+    {
+      option: "prompt",
+      type: "Boolean",
+      description:
+        "Enable interactive prompts. Use --no-prompt to run non-interactively. For `--upgrade`, that proceeds with the upgrade and skips optional follow-up prompts.",
+    },
     {
       option: "container-name",
       alias: "containername",
@@ -218,6 +224,18 @@ export const optionsDefinition = optionator.default({
       description:
         "Keep the MegaLinter container after the run. Useful for `docker logs <container>` post-mortem.",
     },
+    {
+      option: "user-map",
+      type: "Boolean",
+      description:
+        "Run the container as a non-root user. On POSIX systems this uses your user. On other hosts it uses 1000:1000.",
+    },
+    {
+      option: "no-user-map",
+      type: "Boolean",
+      description:
+        "Run the container as root.",
+    },
     {
       option: "codetotal",
       type: "Boolean",

package/lib/runner.js

@@ -83,7 +83,9 @@ export class MegaLinterRunner {
 
     // Run upgrader from v4 to v5
     if (options.upgrade) {
-      const megaLinterUpgrader = new MegaLinterUpgrader();
+      const megaLinterUpgrader = new MegaLinterUpgrader({
+        noPrompt: options.prompt === false,
+      });
       await megaLinterUpgrader.run();
       return { status: 0 };
     }
@@ -216,8 +218,16 @@ export class MegaLinterRunner {
     if (options["containerName"]) {
       commandArgs.push(...["--name", options["containerName"]]);
     }
-    commandArgs.push(...["-v", "/var/run/docker.sock:/var/run/docker.sock:rw"]);
     commandArgs.push(...["-v", `${lintPath}:/tmp/lint:rw`]);
+    if (options["userMap"] === true) {
+      const runtimeUid =
+        typeof process.getuid === "function" ? process.getuid() : 1000;
+      const runtimeGid =
+        typeof process.getgid === "function" ? process.getgid() : 1000;
+      commandArgs.push(...["-e", `MEGALINTER_UID=${runtimeUid}`]);
+      commandArgs.push(...["-e", `MEGALINTER_GID=${runtimeGid}`]);
+      commandArgs.push(...["-e", "HOME=/home/megalinter"]);
+    }
     if (emptyEnvFile) {
       commandArgs.push(...["-v", `${emptyEnvFile}:/tmp/lint/.env:ro`]);
     }