IMP: new tag in file to tell that the script should pass shellcheck

The `# run-shellchek` tag must be placed in the first 10 lines of the file
2025-06-23 11:04:32 +02:00 · 2019-01-24 11:11:08 +01:00
parent 13c88c7da2
commit e8ae07c2e8
12 changed files with 24 additions and 3 deletions
--- a/tests/hardening/12.10_find_suid_files.sh
+++ b/tests/hardening/12.10_find_suid_files.sh
@ -1,7 +1,9 @@
+# run-shellcheck
 test_audit() {
    describe Running void to generate the conf file that will later be edited
    # shellcheck disable=2154
    /opt/debian-cis/bin/hardening/"${script}".sh || true
+    # shellcheck disable=2016
    echo 'EXCEPTIONS="$EXCEPTIONS /usr/lib/dbus-1.0/dbus-daemon-launch-helper"' >> /opt/debian-cis/etc/conf.d/"${script}".cfg

    describe Running on blank host
--- a/tests/hardening/12.11_find_sgid_files.sh
+++ b/tests/hardening/12.11_find_sgid_files.sh
@ -1,3 +1,4 @@
+# run-shellcheck
 test_audit() {
    describe Running on blank host
    register_test retvalshouldbe 0
--- a/tests/hardening/12.7_find_world_writable_file.sh
+++ b/tests/hardening/12.7_find_world_writable_file.sh
@ -1,3 +1,4 @@
+# run-shellcheck
 test_audit() {
    describe Running on blank host
    register_test retvalshouldbe 0
--- a/tests/hardening/12.8_find_unowned_files.sh
+++ b/tests/hardening/12.8_find_unowned_files.sh
@ -1,3 +1,4 @@
+# run-shellcheck
 test_audit() {
    describe Running on blank host
    register_test retvalshouldbe 0
--- a/tests/hardening/12.9_find_ungrouped_files.sh
+++ b/tests/hardening/12.9_find_ungrouped_files.sh
@ -1,3 +1,4 @@
+# run-shellcheck
 test_audit() {
    describe Running on blank host
    register_test retvalshouldbe 0
--- a/tests/hardening/2.17_sticky_bit_world_writable_folder.sh
+++ b/tests/hardening/2.17_sticky_bit_world_writable_folder.sh
@ -1,3 +1,4 @@
+# run-shellcheck
 test_audit() {
    describe Running on blank host
    register_test retvalshouldbe 0