Tags

check-all-the-things 2016.06.29.1

- The "Check A Few More Things Slightly More Securely" release
- More mitigations for Debian perl bug #588017
- Fix dependencies for uscan based checks

check-all-the-things 2016.06.29

- The "Check Some Things Slightly More Securely" release
- Warn that running cats in untrusted dirs could have consequences
- Does not enable checks with disabled flags unless choosing those flags
  This prevents running dangerous checks with -f perl (Closes: #826089)
- Mitigate Debian perl bug #588017 by passing -m-lib=. to perl-based checks
  This prevents perl-based commands from running code from the current dir
- Fix MIME support: disable MIME in commands when MIME is turned off
- Give an error with checks/flags options without check names
- Fixes crash when interrupting the first command that is run
- Fix checking prerequisites for "cat ... | foo" command-lines
- Update dependencies for licensecheck-based checks (see #828830, #828872)
- Disable KWStyle - should only be run manually
- Add clang-tidy - tidy C++ code using LLVM
- Add clang-check - check C++ code using LLVM
- Add clang-modernize (jessie-only) - modernize C++ code
- Add ocaml-unsafe-features - check compiled OCaml for unsafe features

check-all-the-things 2016.06.25

- The "Check A Bunch Of Things" release
- The official abbreviation is now cats. Meow!
- Bump Standards-Version, no changes needed
- Use https for Vcs-Git and other URLs
- Warn away the busy, lazy or noise intolerant
- Drop the separation between groups/flags
- Drop todo item deps down to Suggests
- Fix file matching in a number of cases
- Add argument completion for bash
- Add an indicator of the currently running command
- Add (slow) support for matching files based on MIME type (Closes: #791722)
- Add better advice for style/complexity/other checks
- Disable network checks when there is no default gateway
- Trim check output to 10 lines by default
- Support overlays for older distros
- Add 'modify' flag for commands that modify files and
  thus should not be run by default
- Add 'manual' flag for commands that must be manually run
- Handle 'todo' flagged checks properly
- Show list of found file extentions that were not checked
- Rename final section to 'Remarks' since the name grew long
- Give an error when choosing unknown checks/flags
- Report when help is needed for some existing checks
- Match more ZIP-based files for the unzip-test check
- Document the use of usertags for this package
- Document places where more check tools can be found
- Add appstreamcli validate - check AppStream files
- Add appstream-util validate - check AppStream files
- Add bls-standalone - check build logs for issues
- Add build-log-static-library - warn against static linking
- Add complexity - check C code for function complexity
- Add kwstyle - check C code for style conformance
- Add opencolladavalidator - check COLLADA files
- Add csslint-0.6 - check CSS files
- Add wrap-and-sort - wrap and sort various debian/ files
- Add license-reconcile - check debian/copyright files
- Add debmake-k - check debian/copyright files
- Add autodep8 - check if DEP-8 tests can be created
- Add lockdep - check pthread-using programs
- Add zzuf - fuzz program input
- Add afl - intelligently fuzz program input
- Add hardening-check - check programs for hardening
- Add spellintian - check spelling using lintian dictionaries
- Add flightcrew - check epub e-book files
- Add erlang-shell-inject - check for Erlang shell metachar injection
- Add erl-tidy - check Erlang code
- Add font-embedding-restrictions - check TTF embedding restrictions
- Add two jsonlints - check JSON files
- Add autoupdate - update autotools files
- Add autoscan - check completeness of configure.ac
- Add timeless - check for macros that break reproducible builds
- Add http - check for http URLs to switch to https
- Add embed checks - heuristics for embedded code copies
- Add mailto - check mailto: links
- Add ocaml-shell-injection - check for OCaml shell metachar injection
- Add pylint - check Python code for various issues
- Add rpmlint - check RPM files
- Add web-to-shell - check for `curl | sudo sh` antipattern
- Add ssl-cert-check - check SSL key/cert files
- Add yamllint - check YAML files
- TODO items for android-lint smatch rzip-test lrzip-test
  csslint scan-copyrights licensecheck2dep5 debian-tracker
  erlang-elvis opentype-sanitiser bugpicker nit librejs-cli
  jpegoptim lisp-critic project-flint scheck ocaml-unsafe
  ocaml-mascot cpants-lint php7cc pngcrush optipng advpng
  mypy pycodestyle pydocstyle python3-requirements-detector
  pydiatra pytype ruby-reek ruby-sadist ruby-derailer
  ruby-space swiftlint x509lint certlint

check-all-the-things 2015.12.10

- Option to show commands instead of running them
- Show the currently running command as a progress indicator
- Line-by-line output when the ptyprocess module is not installed
- Show comments that have no associated command
- Make the Debian package build reproducible
- Make the uscan check work when USCAN_VERBOSE is set
- Add php-grinder - check PHP code for various flaws
- TODO items for cppclean js-standard js-modern-standard
  Microsoft-Font-Validator sass-lint scss-lint lesslinter
  django-template-tests soot plato coffeelint phpcpd
  clonedigger xenon brakeman scalastyle tailor

check-all-the-things 2015.11.08.1

- Fix traceback when using installed script (Closes: #804491)

check-all-the-things 2015.11.08

- Option to quit when interrupted (Closes: #796338)
  Quit after recieving two interrupts within 0.5 seconds
- Prune/filter VCS dirs for some checks (Closes: #796340)
- Allow selection of which checks to run based on
  check names, flag names and group names
- Hide checks with no output by default
- Minimise display of suppressed checks by default
- Display names of checks that are not yet implemented
- Improve help output and add generated manual page
- Show comments for dangerous checks
- Add upstream-metadata - missing DEP-12 data
- Add licensecheck-generated-files - generated files
- Add puppet/puppet-lint - config management checks
- Add licensecheck-incorrect-fsf-address - bad FSF address
- Add 7z-test - test 7zip compressed archives
- Add disabled-tests - find disabled build-time tests
- Add luacheck - check Lua code for common issues
- Rename -m64-m32 to m64-m32 to fit with check selection options
- Rename rust unsafe check to rust-unsafe for namespacing
- Drop appdata-validate - should not be used any longer
- Fixes for ftlint clang-modernize bashate shellcheck empty
  bfbtester *-private-key isutf8 unzip-test
- TODO items for foodcritic dodgy ruby-lint sourcecode-spellchecker
  chk-origtargz ansible-lint puppet-syntax cbmc vera nsiqcppstyle
  clang-check clang-tidy kwstyle abi-compliance-checker krazy
  checkheaders ublinter clazy csslint dart-shell-metachars
  dep11-tools spellintian scan-copyright gendarme

check-all-the-things 2015.08.11.1

- Actually fix dependencies for suspicious-source test

check-all-the-things 2015.08.11

- Add comments for tests that need an explanation
- Drop checkmp3/lintian4python tests, removed from Debian
- Fix dependencies for cme-check-dpkg test
- Fix dependencies for suspicious-source test
- Add flawfinder - C/C++ static analyser for security
- Add pmccabe - complexity analysis for C/C++
- Add pyflakes3 - Python 3 static analyser for logic errors
- Add lintex - finds TeX-related garbage files
- Add ghc-mod lint - Haskell linting
- Add isutf8 - ensure text files are UTF-8 encoded
- Add deheader - tool for reducing C/C++ header inclusion
- Add checks for X.509, OpenSSH and OpenPGP private keys
- Add check for empty files and directories
- Add check for TODO-related keywords
- Add check for install-related keywords in README
- Add check for -m32/-m64 compiler options
- Suggest using clang-modernize to update C++ code
- Suggest building go:generate files from source
- Compatibility with Python 3.2 from wheezy

* Initial release.