Isaac Evans comments

Results 85 comments of


                                            Isaac Evans

The rule dockerfile.best-practice.missing-image-version.missing-image-version does not handle intermediate stages using earlier stages

moved to semgrep-rules

Move to one rule per YAML file

From the registry perspective, it is a difficult to figure out which rule to highlight in the test case when we have more than 1 rule per file. And from...

"Error while running rules: 0 bytes read on a total of 2 expected bytes" in Dockerfiles without trailing newlines

A gitlab user says updating cpu & ram solved it: https://stackoverflow.com/questions/74027360/how-to-fix-semgreperror-error-while-running-rules-0-bytes-read-on-a-total-of-2

Include requested and scanned SLoC counts in output

I think we'd enable this mode in `semgrep ci` by default, and in that mode it would be good to know the SLOC count for all files, not just targeted...

How to parse gradle file with semgrep

@brendongo is this resolved?

Better message for partial parsing errors

@dan5382 why did this get closed?

options.generic_comment_style does not work with pattern-regex

cc @mjambon

semgrep test reports rules are missing while present in the yaml file

we’d definitely accept a PR to fix this behavior, but just FYI we are in the middle of removing the existing Python code so we can ship a static binary...

"Fetching configuration from semgrep.dev" shown even when not logged in

low pri but should be fixed still, go away stale-bot

$...BODY not working for ruby

go away stale bot cc @aryx for the issue