timhemel

I have installed sqlite3 via Macports, which installs the dynamic library in `/opt/local/lib/libsqlite3.dylib`. On my system there is also on in `/usr/lib/libsqlite3.dylib`, but this looks like one that was shipped...

relation between ASVS-4.0-7.2.{1,2} and 7.1.{3,4}

15

Reading 7.1 and 7.2 it seemed to me that there may be some duplication. Perhaps I have missed something. It looks to me as if 7.2.1 and 7.2.2 are specific...

cacert certificate rejected by unpackCertificate

2

The archive at https://archive.synology.com/download/DSM/release/6.2.1/23824/DSM_DS112+_23824.pat contains a certificate file that is unpacked to ``` unpack/DSM_DS112+_23824.pat-tar-1/hda1.tgz-xz-1/unpacked-from-xz-tar-1/usr/lib/python2.7/ensurepip/_bundled/pip-8.1.1-py2.py3-none-any.whl-zip-1/pip/_vendor/requests/cacert.pem ``` unpackCertificate rejects this file and says that it is not a certificate.

signature scanning behaviour for overlapping signatures

4

What is the expected behaviour for signature matching in the following situation? signature = aba string in which to search = abababc There are three possibilities: position 0 only, position...

semgrep CLI: report metadata in SARIF property bag

1

**Is your feature request related to a problem? Please describe.** SARIF output does not include metadata. This makes it hard to extract information from it in an automated way, such...

semgrep test reports rules are missing while present in the yaml file

3

**Describe the bug** Semgrep testing reports that it is missing rules while they are present in the YAML file. **To Reproduce** I am using the following rule file `detect-foo.yml`: ```...