Isaac Evans
Isaac Evans
@IagoAbal perhaps we should add that to the documentation for taint mode?
@prathya95 would you mind sharing a link from https://semgrep.live as a reproduction?
Looks like this is fixed actually -- at least all the issues in the original comment! @aryx I'm going to close but feel free to re-open if there's another thing...
Great, thanks for catching that @schreddies!
Somewhat related: https://github.com/returntocorp/semgrep-action/pull/319
Just to give a quick update on this: we are planning to merge semgrep-action code into semgrep CLI. Hopefully we can make some improvements like this once that is done....
Thanks for sharing @sbassett29 and @xmo-odoo. Two thoughts: * The preferred solution should be we make it easy to contribute a custom public policy that is hosted in the registry,...
Ugh, I've added a priority tag to this which I think will make stalebot go away
Relatedly: https://github.com/returntocorp/semgrep/issues/4281 We are working on this with the lawyers, but it will be a while till we have an update.
We do have a plan here, see messaging in community slack, haven't executed the change on repo yet