Commit b4d147df authored by Leo's avatar Leo

Add tags for secfixes

parent 6f63295d
......@@ -382,22 +382,65 @@ for more information.
Severity: Important, Certainty: Certain
## cpan-variable [AL35]
# LABEL TAGS (secfixes-check)
The variables `cpandepends`, `cpanmakedepends` and `cpancheckdepends` were created
by the apkbuild-cpan program but are now deprecated and their contents must be merged
into the contents of its respective variable.
## secfixes-missing-colon [AL37]
Severity: Minor, Certainty: Certain
The secfixes header is missing a colon at the end.
## overwrite-xflags [AL36]
Severity: Serious, Certainty: Certain
Don't overwrite `CFLAGS`, `GOFLAGS`, `CPPFLAGS`, `CXXFLAGS` and `FFLAGS`. There
flags are generally defined outside the of the APKBUILD and should not be
overwritten because they contain important flags that should not be discarded.
Instead, expand the variable. For example: `CFLAGS="$CFLAGS .."`
## pkgver-pkgrel-missing-colon [AL38]
This list might be expanded as more variables are found that should not be
overwritten.
The pkgver-pkgrel header is colon at the end.
Severity: Serious, Certainty: Certain
## pkgver-pkgrel-invalid-pkgver [AL39]
The pkgver-pkgrel header has an invalid pkgver.
Severity: Serious, Certainty: Certain
## pkgver-pkgrel-invalid-pkgrel [AL40]
The pkgver-pkgrel header has an invalid pkgrel.
Severity: Serious, Certainty: Certain
## cve-identifier-missing-hyphen [AL41]
The CVE identifier is missing a leading hyphen.
Severity: Serious, Certainty: Certain
## cve-identifier-missing-cve-prefix [AL42]
The CVE identifier is missing the starting 'CVE-' string.
Severity: Serious, Certainty: Certain
## cve-identifier-invalid-characters [AL43]
The CVE identifier has invalid characters after the starting 'CVE-'
string, only integers and hyphens are valid.
## cve-identifier-invalid-year [AL44]
The CVE identifier has an invalid year, it must be a 4 year digit.
Severity: Serious, Certainty: Certain
## cve-identifier-short-id [AL45]
The CVE identifier has a too short ID, it must be at least 4 digits
with no upper limit.
Severity: Serious, Certainty: Certain
## cve-identifier-hyphens [AL46]
The CVE identifier has too many or too few hyphens, it must have
exatly 2 hyphens.
Severity: Serious, Certainty: Certain
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment