Pieter De Cremer (Semgrep)

Autofix tests for all rules with autofixes

7

Sorry for the big PR!

Tests do not return results when only true negative test cases are present

2

**Describe the bug** When the test file only contains negative test cases (the `ok: ` syntax). The results of this test are not returned if these tests pass. Also, if...

Fix false positive in bug report

3

Fix for bug reported here: https://github.com/returntocorp/semgrep-rules/issues/2407

https://github.com/returntocorp/semgrep-rules/blob/384221e9e42d3a491b470ec84a4d00eba2cbebfa/ruby/rails/security/injection/tainted-sql-string.yaml#L13

[Docker] environment variables can not be matched using metavariables in the ENV statement

8

**Describe the bug** I want to find the value of a environment variable declared with ENV ``` pattern: ENV ... ``` matches the line on my local version, but not...

Set samesite flag in cookies

2

We are researchers at Semgrep, an open-source a static analysis tool. We regularly test new rules for this tool on open source code. During this testing we identified some cookie...