Skip to content

Commit

Permalink
Update semgrep.yml
Browse files Browse the repository at this point in the history
  • Loading branch information
jndamito authored Jul 25, 2024
1 parent b89e607 commit f9ca047
Showing 1 changed file with 12 additions and 2 deletions.
14 changes: 12 additions & 2 deletions Matching_scripts/semgrep.yml
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,8 @@ rules:
- id: duplicate-finding-stack-trace
message: Duplicate stack trace exposure found by Snyk and CodeQL
severity: WARNING
languages:
- json # Semgrep will apply this rule to JSON files
pattern-either:
- pattern-inside: snyk-results.json
pattern: vulnerability.title
Expand All @@ -13,6 +15,8 @@ rules:
- id: duplicate-finding-trust-boundary
message: Duplicate trust boundary violation found by Snyk and CodeQL
severity: WARNING
languages:
- json # Semgrep will apply this rule to JSON files
pattern-either:
- pattern-inside: snyk-results.json
pattern: vulnerability.title
Expand All @@ -24,6 +28,8 @@ rules:
- id: duplicate-finding-null-dereference
message: Duplicate null dereference found by Snyk and CodeQL
severity: WARNING
languages:
- json # Semgrep will apply this rule to JSON files
pattern-either:
- pattern-inside: snyk-results.json
pattern: vulnerability.title
Expand All @@ -32,10 +38,12 @@ rules:
pattern: $.check_name
regex: '.*dereferenced-value.*'

# Rules for Resource Leaks
# New Rules for Resource Leaks
- id: duplicate-finding-resource-leak
message: Duplicate resource leak found by Snyk and CodeQL
severity: WARNING
languages:
- json # Semgrep will apply this rule to JSON files
pattern-either:
- pattern-inside: snyk-results.json
pattern: vulnerability.title
Expand All @@ -44,10 +52,12 @@ rules:
pattern: $.check_name
regex: '.*resource-leak.*'

# Rules for Uncaught Exceptions
# New Rules for Uncaught Exceptions
- id: duplicate-finding-uncaught-exception
message: Duplicate uncaught exception found by Snyk and CodeQL
severity: WARNING
languages:
- json # Semgrep will apply this rule to JSON files
pattern-either:
- pattern-inside: snyk-results.json
pattern: vulnerability.title
Expand Down

0 comments on commit f9ca047

Please sign in to comment.