chore: update amp-devcontainer from v2.5.0 to v4.0.2 (#217)

chore: update amp-devcontainer to v4.0.2

.devcontainer/Dockerfile

@@ -0,0 +1 @@
+FROM ghcr.io/philips-software/amp-devcontainer:v4.0.2@sha256:2d052e0bcb3840ea45aaa21ea6904f6d84b0e310c97e5690a6d48da522ec384e

.devcontainer/devcontainer.json

@@ -1,25 +1,37 @@
-// For format details, see https://aka.ms/devcontainer.json. For config options, see the README at:
-// https://github.com/microsoft/vscode-dev-containers/tree/v0.231.6/containers/cpp
 {
-    "name": "C++",
-    "image": "ghcr.io/philips-software/amp-devcontainer@sha256:a6e3e72d23ad998339495c2c4e921155cda3bdd3554f1350b55fe7501a1136e9", //v2.5.0
-    "runArgs": [
-        "--cap-add=SYS_PTRACE",
-        "--security-opt",
-        "seccomp=unconfined"
-    ],
-    // Add the IDs of extensions you want installed when the container is created.
-    "customizations": {
-        "vscode": {
-            "settings": {},
-            "extensions": [
-                "marus25.cortex-debug",
-                "mcu-debug.debug-tracker-vscode",
-                "matepek.vscode-catch2-test-adapter",
-                "ms-vscode.cmake-tools",
-                "llvm-vs-code-extensions.vscode-clangd",
-                "SonarSource.sonarlint-vscode"
-            ]
-        }
+  // This devcontainer has been set-up to run docker-from-docker scenarios as per
+  // https://github.com/microsoft/vscode-dev-containers/tree/main/containers/docker-from-docker
+  "build": {
+    "context": "..",
+    "dockerfile": "Dockerfile"
+  },
+  "runArgs": ["--add-host=host.docker.internal:host-gateway"],
+  "remoteEnv": { "LOCAL_WORKSPACE_FOLDER": "${localWorkspaceFolder}" },
+  "mounts": [
+    "source=/var/run/docker.sock,target=/var/run/docker.sock,type=bind"
+  ],
+  "customizations": {
+    "vscode": {
+      "extensions": [
+        "llvm-vs-code-extensions.vscode-clangd",
+        "marus25.cortex-debug",
+        "matepek.vscode-catch2-test-adapter",
+        "mhutchie.git-graph",
+        "ms-vscode.cmake-tools",
+        "ms-vscode.cpptools",
+        "ms-vsliveshare.vsliveshare",
+        "SonarSource.sonarlint-vscode"
+      ],
+      "settings": {
+        "C_Cpp.autoAddFileAssociations": false,
+        "C_Cpp.intelliSenseEngine": "disabled",
+        "clangd.arguments": [
+          "--query-driver=/**/arm-none-eabi-*"
+        ],
+        "cmake.copyCompileCommands": "${workspaceFolder}/build/compile_commands.json",
+        "cmake.options.statusBarVisibility": "compact",
+        "sonarlint.pathToCompileCommands": "${workspaceFolder}/build/compile_commands.json"
+      }
     }
+  }
 }

.github/dependabot.yml

@@ -6,3 +6,7 @@ updates:
     directory: /
     schedule:
       interval: daily
+  - package-ecosystem: docker
+    directory: /
+    schedule:
+      interval: daily

.mega-linter.yml

@@ -7,13 +7,13 @@ ENABLE:
   - YAML
 DISABLE_LINTERS:
   - REPOSITORY_DEVSKIM
+  - REPOSITORY_KICS
   - REPOSITORY_SEMGREP
   - SPELL_CSPELL
   - SPELL_PROSELINT
 DISABLE_ERRORS_LINTERS:
   - MARKDOWN_MARKDOWN_LINK_CHECK
   - SPELL_LYCHEE
 PRINT_ALPACA: false
-FLAVOR_SUGGESTIONS: false
 SHOW_SKIPPED_LINTERS: false
 FILTER_REGEX_EXCLUDE: (hal_st/middlewares/STM32_WPAN/)

.trivyignore

@@ -0,0 +1,7 @@
+# See: https://avd.aquasec.com/misconfig/dockerfile/general/avd-ds-0002/
+# We allow root access in our container that we use for development purposes
+DS002
+
+# See: https://avd.aquasec.com/misconfig/dockerfile/general/avd-ds-0026/
+# We don't require a HEALTHCHECK for our devcontainer
+DS026