Isaac Evans comments

Results 85 comments of


                                            Isaac Evans

Add Native (non-WSL) Windows support to semgrep

@tpetr has your work closed this issue?

Semgrep won't scan files that don't end with the right extension

Going to close this as a dup of #3090 which is still open

Semgrep began to detect GitHub Actions in 1.57.0

@aryx

Ability to disable taint propagators for operators.

hey @jcttk this question may be better asked on our Slack for a fast response https://go.semgrep.dev/slack @nmote any thoughts?

Target file path handling is inconsistent for relative versus absolute path.

Labeled this as a documentation issue for now, but could definitely be convinced it is a bug and would accept a PR or test case PR for it!

FileNotFoundError: [Errno 2] No such file or directory: 'git'

if you run `which git` what output do you get?

FileNotFoundError: [Errno 2] No such file or directory: 'git'

unfortunately I can't reproduce this. I'll ping the team to see if there are any ideas

Missing docker syntax equivalence on ENTRYPOINT parsing

Seems we are missing a docker syntax equivalence on ENTRYPOINT parsing, updated the description

Semgrep changing current directory causes unexpected file resolving behaviour

Thanks for this bug report @Sjord. As a workaround, have you seen https://github.com/returntocorp/semgrep-action? Many other semgrep users are using that successfully to run in GitLab CI, and it has a...

Filter Semgrep Result by Confidence Level

We're unlikely to implement this as the CLI output can already be exported to a structured format and filtered with `jq` or other tools, and we'd like to encourage users...