Yoann Padioleau

icon indicating a website link https://twitter.com/yoann_padioleau icon indicating an email [email protected]

icon location Perugia, Italy icon location I like to code and do research on stuff to make it easier to code stuff

Results 358 comments of Yoann Padioleau

Add the substring Python syntax in the metavariable-comparison

I think it's fine. We just need to handle the possible out of band errors and report them nicely to the user, without crashing the whole scan

semgrep 1.59.0 build failure

I've commented on the tree-sitter repo

semgrep 1.59.0 build failure

cc @mjambon who knows the best why we use tree-sitter.h instead of api.h

refactor(cli): cli deduplication in core

Can we merge this? Did you rebase?

refactor(cli): cli deduplication in core

Please remove the UCommon.pr2 and actually add a rule for it in semgrep.jsonnet

Semgrep changing current directory causes unexpected file resolving behaviour

@spencerdrak is this still an issue? Closing in doubt.

Testing with --test no longer works with rules written for the generic parser which rely on paths:include

I see. --test was not designed with multiple target files per rule. But yes maybe we should allow it.

Testing with --test no longer works with rules written for the generic parser which rely on paths:include

sorry about that ... too many things to fix ...

Filter Semgrep Result by Confidence Level

yep, sounds like a useful feature Confidence is not formally specified though right now. It's just part of the metadata. What are the possibilties? low/high/medium?

[DRAFT] experimental cli-side treatment assignment

@amchiclet was talking recently to use Prefab for rollout. (I don't know what it is, but maybe zz has some opinions). I'm closing this PR because of the OSS-pro merge...