.oelint.cfg


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41

# oelint-adv defaults for this layer. Auto-loaded when oelint-adv runs with this
# directory as the working directory (see contrib/oelint/run-oelint.sh).
#
# Layer-specific parser hints live in oelint.constants.json and are passed by
# contrib/oelint/run-oelint.sh. Per-recipe exceptions should stay inline as
# '# nooelint: <rule.id>' comments next to the finding, so new recipes are fully
# linted and each exception is documented in place. Only rules that provably
# never apply to the whole layer are suppressed here:
#
#   * oelint.var.bbclassextend - meta-freescale is a BSP layer; the bulk of its
#     recipes package machine-specific firmware and prebuilt binaries that are
#     not cross-compilable libraries, so BBCLASSEXTEND (native/nativesdk) does
#     not apply.
#   * oelint.var.suggestedvar.CVE_PRODUCT / .BUGTRACKER - advisory 'suggested'
#     variables. Most recipes here package NXP firmware/BSP components with no
#     upstream bug tracker and no meaningful NVD CPE product; guessing a
#     CVE_PRODUCT would create false or missed CVE matches, which is worse than
#     leaving it unset. Set them inline on the rare recipe that has a real value.
#   * oelint.bbclass.underscores - flags bbclass filenames containing '-'. These
#     class names (machine-overrides-extender, fsl-dynamic-packagearch,
#     kernel-imximage, imx-boot-container, use-imx-headers, etc.) are the layer's
#     long-standing public API, inherited by name across meta-freescale and
#     downstream BSP layers; renaming them would break every 'inherit'. oe-core
#     itself ships dash-named classes (e.g. core-image.bbclass), so the naming
#     convention this rule enforces does not apply here.
#   * oelint.file.inlinesuppress_na - reports an inline suppression as unneeded
#     even when it is load-bearing. All six instances in this layer were checked
#     by deleting the suppression and re-scanning: every one brought back the
#     finding it was said not to suppress (optee-os-fslc.inc alone brought back
#     six oelint.var.override errors). Acting on this rule therefore makes the
#     layer worse, so it carries no signal here. Re-evaluate on an oelint-adv
#     newer than 9.11.2; a genuinely stale suppression must be found by hand
#     until then.
[oelint]
release = wrynose
suppress =
    oelint.var.bbclassextend
    oelint.var.suggestedvar.CVE_PRODUCT
    oelint.var.suggestedvar.BUGTRACKER
    oelint.bbclass.underscores
    oelint.file.inlinesuppress_na