workarounds and cleaning unsupported stuff

.github/workflows/checkmarx.yml → .github/workflows/checkmarx.ym_

@@ -25,4 +25,10 @@ jobs:
 
     steps:
     - name: Checkmarx AST Github Action
-      uses: Checkmarx/[email protected]
+      uses: Checkmarx/[email protected]
+
+      with:
+          base_uri: https://ast.checkmarx.net/
+          cx_tenant: nfr_nfr_ast_corpus
+          cx_client_id: ${{ secrets.CX_CLIENT_ID }}
+          cx_client_secret: ${{ secrets.CX_CLIENT_SECRET }}

.gitmodules

@@ -2,10 +2,6 @@
 	path = builders/arduino-docker-build
 	url = https://github.com/suculent/arduino-docker-build.git
 
-[submodule "builders/lua-inspect"]
-	path = builders/lua-inspect
-	url = https://github.com/davidm/lua-inspect.git
-
 [submodule "builders/micropython-docker-build"]
 	path = builders/micropython-docker-build
 	url = https://github.com/suculent/micropython-docker-build.git
@@ -18,10 +14,6 @@
 	path = builders/nodemcu-docker-build
 	url = https://github.com/suculent/nodemcu-docker-build.git
 
-[submodule "builders/nodemcu-firmware"]
-	path = builders/nodemcu-firmware
-	url = https://github.com/suculent/nodemcu-firmware.git
-
 [submodule "builders/platformio-docker-build"]
 	path = builders/platformio-docker-build
 	url = https://github.com/suculent/platformio-docker-build.git

builders/lua-inspect/CHANGES.txt

@@ -0,0 +1,212 @@
+Change Log.
+
+20120127
+  [*] core: cleanup error messages in inferred values.
+
+20120126
+  [+] Ignore locals named '_' in unused/masking variable reporting.
+
+20111224
+  [+] html/delimited: export type information (in same manner as SciTE)
+  [*] html: improve line number CSS treatment. e.g. don't include in copy/paste
+  [+] html: highlight range of lines of scope of selected variable (like in SciTE).
+  [+] command: add 'luainspect' front-end script in top directory.
+  [+] command: add options for output name and html library path
+
+20100911
+  [+] core: infer types of for loop variables.
+
+20100827
+  [+] core: infer sets involving functions with multiple returns.
+     e.g. local a,b = (function() return 1,2 end)()
+  [!] core:fix: do not infer table sets on LuaInspect types.
+
+20100825
+  [*] SciTE: simplify install (use default path)
+  [!] core: fix: function params should infer to unknown values
+  [!] core: fix: infer: unknown functions return unknown values
+
+20100823
+  [*] SciTE: change Ctrl-Alt-W to Ctrl-Alt-E
+  [!] SciTE: fix bookmarking (Ctrl+F2)
+  [+] SciTE: bundle copy of extman.lua
+
+20100821
+  [+!] core: return analysis enabled following fixes
+
+20100820
+  [!] SciTE: fix folding performance problem (though folding still disabled by default
+      due to OnStyle recursion problem)
+
+20100819
+  [!] core: fix tokenlist when opcode operands reversed lexically
+  [*] metalua/performance - avoid overriding builtin pairs/ipairs
+  [*] SciTE: plugin now loaded as Lua extension script (not globally).
+
+20100818
+  [!] HTML: fix missing chars at end-of-file
+  [!] Metalua: fix lexer line number count off-by-one error
+  [!] SciTE: fix Unicode/UTF-8 encoding breaking formatting
+  [!] core: fix performance problem with tinsertlist function
+  [!] core/performance: cleanup invalidated_code function
+
+20100817
+  [!] core: fix keyword token recognition problems
+  [!] core: skip inspection on require loops
+  [+] core: infer function return values (temporarily disabled)
+  [+] core: detect dead-code (temporarily disabled)
+  [*] core: internal refactoring (ast.valueknown)
+
+20100816
+  core: make reporting optional
+  metalua: patches to metalua lineinfo
+    (was corrupting HTML output and SciTE highlighting)
+
+20100814
+  core: add basic type inferences (e.g. number+number -> number)
+
+20100813
+  core: inspect required modules too
+          (e.g. enables use of imported function signatures)
+  core/SciTE: add list all warnings command (SciTE: Ctrl+Alt+W lists, and F4 iterates them)
+
+20100811
+  SciTE: autocomplete functions arguments when cursor after '('
+  core: fix signatures for os/debug libraries
+  core/SciTE: display function argument list or helpinfo for variables
+  SciTE: Ctrl+Alt+I changed to Ctrl+Alt+B to avoid conflict with
+            SciTE 2.20 incremental search
+
+20100810
+  SciTE: improved "inspect variable" command, supports browsing nested tables.
+  SciTE: split luainspect.autocomplete property into two properties
+  SciTE: add autocomplete function
+  SciTE: autocomplete table fields.
+
+20100809
+  core/SciTE: add function argument count check
+  core/SciTE: jump to definition now supports functions in different files.
+  core/SciTE/HTML: improvements to displaying masking/masked lexicals.
+  core/SciTE: add command to just to previous statement
+  core/SciTE: preliminary variable autocomplete support
+                   (luainspect.autocomplete currently disabled by default)
+  SciTE: add missing style.script_lua.local_param_mutate style.
+
+20100807
+  SciTE: Add luainspect.path.append/luainspect.cpath.append properties
+            to append to package.path/cpath
+  SciTE: Add custom searcher function to locate modules in same path as current buffer.
+  SciTE: Added "force reinspect" command to force full reinspection of code.
+            Note: this will also attempt to unload any modules loaded by previous inspection.
+  SciTE: Improve luainspect.update.delay to delay inspection for given tick count
+           following user typing.  Also displays blue '+' marker when inspection has been delayed.
+
+20100806
+  SciTE: jump to uses, not jumps to exact position, not just line number
+  SciTE: mark lines of invalidated code upon introducing code errors and display
+            error message below invalidated code (not on exact line of error)
+  SciTE: add styling delay option to improve performance (luainspect.update.delay)
+  SciTE: preliminary auto-complete typing support (luainspect.autocomplete)
+            (experimental and currently off by default)
+
+20100805
+  core: Major internal refactoring to simplify incremental compilation
+          (lineinfo managed in tokenlist).  Breaks API.
+  core/SciTE/HTML: identifies local variables that mask other locals (same name):
+         e.g. local x=1; local x=2 (strikethrough)
+  core: added version number variable APIVERSION to luainspect.init.
+  HTML: highlight keywords in selected block
+  SciTE: the incremental compilation feature is now on by default.
+
+20100803
+  core:Evaluate special comments (prefixed by '!') to inject semantic information into analysis
+         (similar to luaanalyze).
+  core: Further work on incremental compilation feature.
+
+20100802
+  core: improve field value inferences
+  SciTE: improve dark style clarity
+  SciTE: make margin markers for variable scope and block mutually exclusive
+
+20100731
+  SciTE: allow styles in properties to be specified by name and more flexibly overridden.
+  SciTE: add optional dark style
+  SciTE/HTML: support mutate upvalues, cleanup styles
+  SciTE: improve keyword highlighting (always highlight containing block)
+
+20100730
+  core: fix scoping of `for` statements (in globals.lua)
+  core/SciTE: highlight keywords and show all keywords in selected statement.
+
+20100729
+  SciTE: options can now be set with SciTE properties.
+  SciTE: refactor: select statement
+  core/SciTE: more work on incremental compilation (luainspect.incremental.compilation)
+
+20100728
+  core/SciTE: add command to select statement or comment containing current cursor selection.
+  core/SciTE: experimental incremental compilation option (ALLOW_INCREMENTAL_COMPILATION)
+  core/SciTE: add special styling (background color) for tab whitespace
+
+20100727
+  SciTE: Fix limited styling range may skip styling (broke in 20100726)
+
+20100726
+  SciTE: apply default styles in script if not specified in properties file.
+  SciTE: initial implementation of folding (but currently disabled due to SciTE problems)
+  SciTE: improve OnStyle only over provided byte range
+  Note: you may now remove LuaInspect styles from your properties file.
+
+20100725
+  SciTE: fix memory overflow when code contains buffer.notes.
+
+20100724
+  SciTE: list all uses of selected variable (currently locals only)
+  SciTE: display errors about mismatched blocks or parens at both top and bottom of problem
+  SciTE: support shebang line
+
+20100723
+  core/SciTE/HTML: Initial support for table fields
+  core/SciTE: initial dynamic value determination
+  core: fix recursive local scoping (`Localrec) in globals.lua
+  SciTE: Mark all range of selected variable's scope in margin
+  SciTE: New command to rename all occurrences of selected variable
+  SciTE: Significant performance gain utilizing loadstring in addition
+    to metalua libraries
+  SciTE: Mark upvalues (lighter blue)
+  SciTE: Fix handling multiple buffers.
+  SciTE: display variable info on double click
+  SciTE: display real-time annotations of all local variables, like a Mathcad worksheet
+         (experimental feature via ANNOTATE_ALL_LOCALS)
+  SciTE: jump (goto) definition of selected variable (currently locals only)
+           ctagsdx.lua from the full SciteExtMan is optional (allows "goto mark" command
+           to return to previous location following a "go to definition").
+  SciTE: add command to inspect table contents.
+  Note: SciTE*.properties and luainspect.css have been updated; please update when upgrading
+
+20100720
+  core: support for detecting unused locals (white on blue)
+  SciTE: display callinfo help on top-level standard library globals
+  SciTE: display local parameters distinctly (dark blue)
+  SciTE: display compiler errors as annotations
+  SciTE: partial workaround for conflict with other lexers
+  SciTE: option to recompile only when cursor line number changes to improve performance
+            and reduce error reporting (set UPDATE_ALWAYS to true in scite.lua to enable this)
+  SciTE: workaround for Metalua libraries sometimes not returning line number in error report
+  Note: SciTE*.properties and luainspect.css have been updated; please update when upgrading
+
+20100719
+  core: Fixed "repeat" statement scope handling (globals.lua)
+  SciTE: Improve performance (not recompile when code not changing)
+  SciTE: Add "!" marker near compiler error.
+  SciTE: Add hotspots on local variables
+
+20100717-2
+  SciTE: highlight all instances of selected identifier
+  Now requires http://lua-users.org/wiki/SciteExtMan
+
+20100717
+  added initial SciTE text editor plugin
+
+20100622
+  initial version with HTML output

builders/lua-inspect/COPYRIGHT

@@ -0,0 +1,28 @@
+LuaInspect License
+
+Copyright (C) 2010 David Manura
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+
+===============================================================================
+
+Uses Metalua libraries (see metalualib/LICENSE).
+Uses jquery (see COPYRIGHT-jquery)
+Uses ExtMan (see COPYRIGHT-extman)
+

builders/lua-inspect/COPYRIGHT-extman

@@ -0,0 +1,23 @@
+ExtMan License
+
+Copyright (C) 2004-2010 Steve Donovan
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+
+===============================================================================

builders/lua-inspect/COPYRIGHT-jquery

@@ -0,0 +1,20 @@
+Copyright (c) 2010 John Resig, http://jquery.com/
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.