* fix: shellcheck fixes, codespell config, and actionlint config
- Add .github/actionlint.yaml with no-shellcheck to disable
false positives in run: blocks
- Update .codespell.cfg to skip third-party assets, themes,
mock data; add intentional words to ignore list
- Fix shellcheck issues in all shell scripts: quoting, egrep
to grep -E, glob iteration, bare redirects, SIGKILL trap
Does not touch workflow YAML files (handled in #6874).
Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>
* hardening: move to argument array pattern for shell execution (#6854)
* docs: update exec_background docblock for string|array param types
Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>
* docs: add PHPDoc to __rrd_execute for PHPStan
Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>
* fix: resolve php-cs-fixer formatting issues
Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>
* revert: remove oauth2.php fix (moved to standalone PR #6886)
Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>
* chore: remove files that belong in other PRs
- Revert lib/poller.php and lib/rrd.php arg-array changes (belong in PR #6855)
- Remove ArgArrayHardeningTest.php (belongs in PR #6855)
- Revert vendor/composer updates (should be a separate PR)
Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>
* chore: remove composer.lock from tracking
Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>
---------
Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>
Co-authored-by: TheWitness <thewitness@cacti.net>
