Can we use _extends from another repo in same org about megalinter

[nvuillam]

Got it :)
I'll make the update when i find time, soon i hope :)
If you are in a hurry you can also submit a PR ^^

[nvuillam]

@bheemvennapureddy please can you try again with beta version ?
GITHUB_TOKEN will be sent as header to get the url defined in your EXTENDS property, as in your curl example :)

[bheemvennapureddy]

That worked

[bheemvennapureddy]

@nvuillam Can you give some insights on this ?

[nvuillam]

Yes you can use EXTENDS using a remote .mega-linter.yml :)

for example:

# Extend from shared sfdx-hardis Mega-Linter configuration :)
EXTENDS:
  - https://raw.githubusercontent.com/hardisgroupcom/sfdx-hardis/main/config/sfdx-hardis.mega-linter-config.yml

DISABLE_ERRORS_LINTERS:
  - CSS_STYLELINT
  - MARKDOWN_MARKDOWN_LINK_CHECK
  - SALESFORCE_LIGHTNING_FLOW_SCANNER
  - YAML_YAMLLINT

[bheemvennapureddy]

@nvuillam Can we use yml directly rather than use the raw content with enterprise raw content only works with tokens and those tokens expire

[bheemvennapureddy]

for example

[bheemvennapureddy]

@nvuillam does that give some context ?

[bheemvennapureddy]

And the without token it fails

[bheemvennapureddy]

https://github.com/oxsecurity/megalinter/blob/main/megalinter/config.py#L112 this might not work for enterprise orgs with sso

[bheemvennapureddy]

https://github.com/orgs/community/discussions/24744 ref

[bheemvennapureddy]

@nvuillam Can you share some insights here ?

[nvuillam]

@bheemvennapureddy I'm afraid it just works with public hosted files :/

a simple http request is used to get remote YML content

Would it help if you could define some variables with credentials that would be sent as query params or Auth headers ?

[bheemvennapureddy]

@nvuillam Can we use the GITHUB_TOKEN passed on the ENV ?

[nvuillam]

Would it work ?
Can you try with some PAT with postman ?
If it worked yes i can make an enhancement :)

[bheemvennapureddy]

We are using a Github App Auth token when gets generated during the build before running megalinter which should be able to access files across org which is what we are doing with https://github.com/release-drafter/release-drafter

[bheemvennapureddy]

@nvuillam this worked for me

curl  -X GET -H "Authorization: token $GITHUB_PAT_TOKEN" https://raw.githubusercontent.com/MyOrg/MyPrivateRepo/HEAD/file.yaml
<content of file.yaml>

[bheemvennapureddy]

@nvuillam why don't we use something like this ? https://github.com/probot/octokit-plugin-config#the-_extends-key

[nvuillam]

Because we didn't think about that when implementing EXTENDS property management :)

I'll make a PR to handle the github token sent as header :)

[nvuillam]

@bheemvennapureddy great, thanks for the feedback :)

Note: the update is now available in latest release 7.10.0 :)