Commit b4d147df authored by Leo's avatar Leo

Add tags for secfixes

parent 6f63295d
...@@ -382,22 +382,65 @@ for more information. ...@@ -382,22 +382,65 @@ for more information.
Severity: Important, Certainty: Certain Severity: Important, Certainty: Certain
## cpan-variable [AL35] # LABEL TAGS (secfixes-check)
The variables `cpandepends`, `cpanmakedepends` and `cpancheckdepends` were created ## secfixes-missing-colon [AL37]
by the apkbuild-cpan program but are now deprecated and their contents must be merged
into the contents of its respective variable.
Severity: Minor, Certainty: Certain The secfixes header is missing a colon at the end.
## overwrite-xflags [AL36] Severity: Serious, Certainty: Certain
Don't overwrite `CFLAGS`, `GOFLAGS`, `CPPFLAGS`, `CXXFLAGS` and `FFLAGS`. There ## pkgver-pkgrel-missing-colon [AL38]
flags are generally defined outside the of the APKBUILD and should not be
overwritten because they contain important flags that should not be discarded.
Instead, expand the variable. For example: `CFLAGS="$CFLAGS .."`
This list might be expanded as more variables are found that should not be The pkgver-pkgrel header is colon at the end.
overwritten.
Severity: Serious, Certainty: Certain
## pkgver-pkgrel-invalid-pkgver [AL39]
The pkgver-pkgrel header has an invalid pkgver.
Severity: Serious, Certainty: Certain
## pkgver-pkgrel-invalid-pkgrel [AL40]
The pkgver-pkgrel header has an invalid pkgrel.
Severity: Serious, Certainty: Certain
## cve-identifier-missing-hyphen [AL41]
The CVE identifier is missing a leading hyphen.
Severity: Serious, Certainty: Certain
## cve-identifier-missing-cve-prefix [AL42]
The CVE identifier is missing the starting 'CVE-' string.
Severity: Serious, Certainty: Certain
## cve-identifier-invalid-characters [AL43]
The CVE identifier has invalid characters after the starting 'CVE-'
string, only integers and hyphens are valid.
## cve-identifier-invalid-year [AL44]
The CVE identifier has an invalid year, it must be a 4 year digit.
Severity: Serious, Certainty: Certain
## cve-identifier-short-id [AL45]
The CVE identifier has a too short ID, it must be at least 4 digits
with no upper limit.
Severity: Serious, Certainty: Certain
## cve-identifier-hyphens [AL46]
The CVE identifier has too many or too few hyphens, it must have
exatly 2 hyphens.
Severity: Serious, Certainty: Certain Severity: Serious, Certainty: Certain
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment