Unable to run megalinter with any options

[pessi-v]

I'm struggling to get megalinter to respect any options that I pass inline. Here's my current attempt:

npx mega-linter-runner -e "'JSON_REPORTER=true'" -e "'JSON_REPORTER_FILE_NAME=./bob.json'" -e "'TEXT_REPORTER=false'" -e "'SARIF_REPORTER=false'" -e "'TAP_REPORTER=false'" -e "'DISABLE_LINTERS=SPELL_CSPELL'" -e "'DISABLE_LINTERS=SPELL_MISSPELL'" -e "'DISABLE_LINTERS=COPYPASTE_JSCPD'" -e "'DISABLE_LINTERS=CREDENTIALS_SECRETLINT'" -e "'DISABLE=true'"

I don't want to have a configuration file, but pass options with flags. Why is it not working?

[nvuillam]

@pessi-v please can you share your command log ?

[pessi-v]

Pulling docker image oxsecurity/megalinter:v8 ...
INFO: this operation can be long during the first use of mega-linter-runner
The next runs, it will be immediate (thanks to docker cache !)
v8: Pulling from oxsecurity/megalinter
Digest: sha256:930b3dbfcfd6814db7e8462f335ebeae8dc1715aeaebb19b0414692ed9930145
Status: Image is up to date for oxsecurity/megalinter:v8
docker.io/oxsecurity/megalinter:v8

What's next:
View a summary of image vulnerabilities and recommendations → docker scout quickview oxsecurity/megalinter:v8
Command: docker run --platform linux/amd64 --rm -v /var/run/docker.sock:/var/run/docker.sock:rw -v /Users/p/c/c:/tmp/lint:rw -e JSON_REPORTER=true -e JSON_REPORTER_FILE_NAME=./bob.json -e TEXT_REPORTER=false -e SARIF_REPORTER=false -e TAP_REPORTER=false -e DISABLE_LINTERS=SPELL_CSPELL -e DISABLE_LINTERS=SPELL_MISSPELL -e DISABLE_LINTERS=COPYPASTE_JSCPD -e DISABLE_LINTERS=CREDENTIALS_SECRETLINT -e DISABLE_LINTERS=REPOSITORY_SECRETLINT -e DISABLE=true oxsecurity/megalinter:v8
Skipped setting git safe.directory DEFAULT_WORKSPACE: ...
Setting git safe.directory default: /github/workspace ...
Setting git safe.directory to /tmp/lint ...
[MegaLinter init] ONE-SHOT RUN
[config] Environment variables only (no config file found in /tmp/lint)

.:oool'                                  ,looo;
.xNXNXl                                 .dXNNXo.
 lXXXX0c.                              'oKXXN0;
 .oKNXNX0kxdddddddoc,.    .;lodddddddxk0XXXX0c
  .:kKXXXXXXXXXXXXNXX0dllx0XXXXXXXXXXXXXXXKd,
    .,cdkOOOOOOOO0KXXXXXXXXXXK0OOOOOOOkxo:'
                  'ckKXNNNXkc'
          ':::::;.  .c0XX0l.  .;::::;.
          'xXXXXXx'   :kx:   ;OXXXXKd.
           .dKNNXXO;   ..   :0XXXXKl.
            .lKXXXX0:     .lKXXXX0:
              :0XXXXKl.  .dXXXXXk,
               ;kXXXXKd:cxXXXXXx'
                'xXNXXXXXXXXXKo.
                 .oKXXXXNXXX0l.
                  .lKNNXNNXO:
                    ,looool'

==========================================================
============= MegaLinter, by OX.security =============
========= https://ox.security?ref=megalinter ===========

---

------------------------------------ MegaLinter, by OX Security ------------------------------------

• Image Creation Date: 2025-06-15T16:22:42Z
• Image Revision: e08c2b0
• Image Version: v8.8.0

---

The MegaLinter documentation can be found at:

• https://megalinter.io/8.8.0

---

MegaLinter initialization
MegaLinter will analyze workspace [/tmp/lint]

[Activation] ACTION_ACTIONLINT has been set inactive, as subdirectory has not been found: .github/workflows (set value "any" to always activate)
[Activation] ANSIBLE_ANSIBLE_LINT has been set inactive, as none of these files has been found: ['.ansible-lint', '.ansible-lint.yml', '.ansible-lint.yaml', '.config/ansible-lint.yml', '.config/ansible-lint.yaml']
[Activation] EDITORCONFIG_EDITORCONFIG_CHECKER has been set inactive, as none of these files has been found: ['.editorconfig']
[Activation] JAVASCRIPT_ES has been set inactive, as none of these files has been found: ['.eslintrc.json', '.eslintrc.yml', '.eslintrc.yaml', '.eslintrc.js', '.eslintrc.cjs', 'package.json:eslintConfig']
[Activation] JSX_ESLINT has been set inactive, as none of these files has been found: ['eslint.config.js', 'eslint.config.mjs', 'eslint.config.cjs', '.eslintrc.json', '.eslintrc.yml', '.eslintrc.yaml', '.eslintrc.js', '.eslintrc.cjs', 'package.json:eslintConfig']
[Activation] KUBERNETES_KUBECONFORM has been set inactive, as subdirectory has not been found: kubernetes (set value "any" to always activate)
[Activation] KUBERNETES_HELM has been set inactive, as none of these files has been found: ['Chart.yml', 'Chart.yaml']
[Activation] KUBERNETES_KUBESCAPE has been set inactive, as none of these files has been found: ['Chart.yml', 'Chart.yaml']
[Activation] REPOSITORY_LS_LINT has been set inactive, as none of these files has been found: ['.ls-lint.yml']
[SemgrepLinter] Deactivated because no ruleset has been defined
[Activation] SALESFORCE_SFDX_SCANNER_APEX has been set inactive, as subdirectory has not been found: force-app (set value "any" to always activate)
[Activation] SALESFORCE_SFDX_SCANNER_AURA has been set inactive, as subdirectory has not been found: force-app (set value "any" to always activate)
[Activation] SALESFORCE_SFDX_SCANNER_LWC has been set inactive, as subdirectory has not been found: force-app (set value "any" to always activate)
[Activation] SALESFORCE_LIGHTNING_FLOW_SCANNER has been set inactive, as subdirectory has not been found: force-app (set value "any" to always activate)
[Activation] SPELL_PROSELINT has been set inactive, as none of these files has been found: ['.proselintrc', 'proselint/config.json']
[Activation] SPELL_VALE has been set inactive, as none of these files has been found: ['.vale.ini']
[Activation] SQL_SQLFLUFF has been set inactive, as none of these files has been found: ['.sqlfluff']
[Activation] SWIFT_SWIFTLINT has been set inactive, as none of these files has been found: ['.swiftlint.yml']
[Activation] TSX_ESLINT has been set inactive, as none of these files has been found: ['.eslintrc.json', '.eslintrc.yml', '.eslintrc.yaml', '.eslintrc.js', '.eslintrc.cjs', 'package.json:eslintConfig']
[Activation] TYPESCRIPT_ES has been set inactive, as none of these files has been found: ['.eslintrc.json', '.eslintrc.yml', '.eslintrc.yaml', '.eslintrc.js', '.eslintrc.cjs', 'package.json:eslintConfig']
JSON_ESLINT_PLUGIN_JSONC has been disabled in MegaLinter for the following reason: Bug in eslint-plugin-jsonc: ota-meshi/eslint-plugin-jsonc#328
MAKEFILE_CHECKMAKE has been disabled in MegaLinter for the following reason: Security issues: checkmake/checkmake#99
MARKDOWN_REMARK_LINT has been disabled in MegaLinter for the following reason: Bug in remark-lint: remarkjs/remark-lint#322
Skipped linters: ACTION_ACTIONLINT, ANSIBLE_ANSIBLE_LINT, EDITORCONFIG_EDITORCONFIG_CHECKER, JAVASCRIPT_ES, JAVASCRIPT_PRETTIER, JSON_ESLINT_PLUGIN_JSONC, JSX_ESLINT, KUBERNETES_HELM, KUBERNETES_KUBECONFORM, KUBERNETES_KUBESCAPE, MAKEFILE_CHECKMAKE, MARKDOWN_REMARK_LINT, PYTHON_RUFF_FORMAT, REPOSITORY_LS_LINT, REPOSITORY_SECRETLINT, REPOSITORY_SEMGREP, SALESFORCE_LIGHTNING_FLOW_SCANNER, SALESFORCE_SFDX_SCANNER_APEX, SALESFORCE_SFDX_SCANNER_AURA, SALESFORCE_SFDX_SCANNER_LWC, SPELL_PROSELINT, SPELL_VALE, SQL_SQLFLUFF, SWIFT_SWIFTLINT, TSX_ESLINT, TYPESCRIPT_ES, TYPESCRIPT_PRETTIER
[ApiReporter] Not enabled as API_REPORTER is not defined to true
To receive reports as email, please set variable EMAIL_REPORTER_EMAIL

MegaLinter now collects the files to analyse
Listing all files in directory [/tmp/lint], then filter with:

• File extensions: , .R, .RMD, .Rmd, .bash, .bicep, .c, .c++, .cc, .cdxml, .clj, .cljc, .cljs, .coffee, .config, .cpp, .cs, .csproj, .css, .cu, .cuh, .cxx, .dart, .dash, .edn, .env, .feature, .go, .gradle, .graphql, .groovy, .gvy, .h, .h++, .hcl, .hh, .hpp, .htm, .html, .hxx, .java, .js, .json, .json5, .jsonc, .ksh, .kt, .kts, .lua, .markdown, .md, .mdx, .nf, .p6, .php, .pl, .pl6, .pm, .pm6, .pp, .props, .proto, .ps1, .ps1xml, .psd1, .psm1, .psrc, .pssc, .py, .r, .raku, .rakumod, .rakutest, .rb, .rs, .rst, .saas, .scala, .scss, .sh, .smk, .sql, .t, .targets, .tex, .tf, .ts, .txt, .vb, .xml, .xsd, .yaml, .yml
• File names (regex): Containerfile, Dockerfile, Jenkinsfile, Snakefile, package.json
• Excluding .gitignored files [25279]: apps/web-ui/dist/assets/index-BXa0YgJa.js, apps/web-ui/dist/assets/index-DM8WAkSI.css, apps/web-ui/dist/index.html, apps/web-ui/node_modules/.vite/_svelte_metadata.json, megalinter-reports/.cspell.json, megalinter-reports/bob_1.json, megalinter-reports/megalinter.log, node_modules/.bin/acorn, node_modules/.bin/browserslist, node_modules/.bin/carbonara,…(full list in DEBUG)
  Kept [52] files on [110] found files

+----MATCHING LINTERS-------------------+------------------------------------------------------------------------+----------------+------------+
| Descriptor | Linter | Criteria | Matching files | Format/Fix |
+------------+--------------------------+------------------------------------------------------------------------+----------------+------------+
| COPYPASTE | jscpd | | project | no |
| CSS | stylelint | .css|.scss|.saas | 1 | no |
| HTML | djlint | .html|.htm | 1 | no |
| HTML | htmlhint | .html|.htm | 1 | no |
| JAVASCRIPT | standard | .js | 2 | no |
| JSON | jsonlint | .json | 22 | no |
| JSON | v8r | .json | 22 | no |
| JSON | prettier | .json | 22 | no |
| JSON | npm-package-json-lint | .json|package.json | project | no |
| MARKDOWN | markdownlint | .md | 4 | no |
| MARKDOWN | markdown-link-check | .md | 4 | no |
| MARKDOWN | markdown-table-formatter | .md | 4 | no |
| REPOSITORY | checkov | | project | no |
| REPOSITORY | devskim | | project | no |
| REPOSITORY | dustilock | | project | no |
| REPOSITORY | git_diff | | project | no |
| REPOSITORY | gitleaks | | project | no |
| REPOSITORY | grype | | project | no |
| REPOSITORY | kics | | project | no |
| REPOSITORY | syft | | project | no |
| REPOSITORY | trivy | | project | no |
| REPOSITORY | trivy-sbom | | project | no |
| REPOSITORY | trufflehog | | project | no |
| SPELL | cspell | | 52 | no |
| SPELL | lychee | .md|.mdx|.markdown|.html|.htm|.rst|.txt|.json|.jsonc|.json5|.yaml|.yml | 27 | no |
| TYPESCRIPT | ts-standard | .ts | 19 | no |
+------------+--------------------------+------------------------------------------------------------------------+----------------+------------+

.....

[Updated Sources Reporter] No source file has been formatted or fixed

+----SUMMARY----+--------------------------+---------------+-------+-------+--------+----------+--------------+
| Descriptor | Linter | Mode | Files | Fixed | Errors | Warnings | Elapsed time |
+---------------+--------------------------+---------------+-------+-------+--------+----------+--------------+
| ❌ COPYPASTE | jscpd | project | n/a | | 5 | 0 | 4.4s |
| ❌ CSS | stylelint | list_of_files | 1 | | 1 | 0 | 4.87s |
| ❌ HTML | djlint | list_of_files | 1 | | 2 | 0 | 1.93s |
| ✅ HTML | htmlhint | list_of_files | 1 | | 0 | 0 | 2.48s |
| ❌ JAVASCRIPT | standard | list_of_files | 2 | | 1 | 0 | 15.48s |
| ✅ JSON | jsonlint | list_of_files | 22 | | 0 | 0 | 1.94s |
| ✅ JSON | npm-package-json-lint | project | n/a | | 0 | 0 | 4.82s |
| ⚠️ JSON | prettier | list_of_files | 22 | | 1 | 0 | 6.53s |
| ❌ JSON | v8r | list_of_files | 22 | | 1 | 0 | 28.19s |
| ⚠️ MARKDOWN | markdownlint | list_of_files | 4 | | 8 | 0 | 4.84s |
| ❌ MARKDOWN | markdown-link-check | list_of_files | 4 | | 6 | 0 | 4.76s |
| ⚠️ MARKDOWN | markdown-table-formatter | list_of_files | 4 | | 1 | 0 | 2.02s |
| ✅ REPOSITORY | checkov | project | n/a | | 0 | 0 | 34.04s |
| ❌ REPOSITORY | devskim | project | n/a | | 792 | 852 | 205.27s |
| ✅ REPOSITORY | dustilock | project | n/a | | 0 | 0 | 2.57s |
| ✅ REPOSITORY | gitleaks | project | n/a | | 0 | 0 | 1.68s |
| ✅ REPOSITORY | git_diff | project | n/a | | 0 | 0 | 0.07s |
| ❌ REPOSITORY | grype | project | n/a | | 20 | 0 | 64.5s |
| ✅ REPOSITORY | kics | project | n/a | | 0 | 0 | 64.69s |
| ✅ REPOSITORY | syft | project | n/a | | 0 | 0 | 30.1s |
| ❌ REPOSITORY | trivy | project | n/a | | 1 | 0 | 58.19s |
| ✅ REPOSITORY | trivy-sbom | project | n/a | | 0 | 0 | 31.95s |
| ✅ REPOSITORY | trufflehog | project | n/a | | 0 | 0 | 34.45s |
| ❌ SPELL | cspell | list_of_files | 53 | | 283 | 0 | 13.26s |
| ❌ SPELL | lychee | list_of_files | 27 | | 8 | 0 | 26.55s |
| ❌ TYPESCRIPT | ts-standard | list_of_files | 19 | | 1 | 0 | 1.98s |
+---------------+--------------------------+---------------+-------+-------+--------+----------+--------------+

�[34mYou could have same capabilities but better runtime performances if you use a MegaLinter flavor:�[0m

• [cupcake] oxsecurity/megalinter/flavors/cupcake@v8 (88 linters) https://megalinter.io/8.8.0/flavors/cupcake/

[JSON Reporter] Generated JSON report: /tmp/lint/megalinter-reports/./bob.json
�[31m❌ Error(s) have been found during linting�[0m
To disable linters or customize their checks, you can use a .mega-linter.yml file at the root of your repository
More info at https://megalinter.io/8.8.0/configuration/

[pessi-v]

I've solved the problem:

It appears, that only the last -e option for any env variable will be used, so if you want to disable multiple linters, you'd have to use

-e "'DISABLE_LINTERS=SPELL_CSPELL,SPELL_MISSPELL'"

not

-e "'DISABLE_LINTERS=SPELL_CSPELL'" -e "'DISABLE_LINTERS=SPELL_MISSPELL'"

[nvuillam]

Oh sorry i should have seen it 🥹🥹
All variables can be specified only one time even if they have multiple values, indeed :)