From 65e08f66dacbb6d215494123bdc3cd4681aa7b15 Mon Sep 17 00:00:00 2001 From: iacore Date: Sat, 24 Feb 2024 18:28:44 +0000 Subject: [PATCH] update semgrep rules --- semgrep.yml | 9 ++++----- 1 file changed, 4 insertions(+), 5 deletions(-) diff --git a/semgrep.yml b/semgrep.yml index 062d7a2..bb9d225 100644 --- a/semgrep.yml +++ b/semgrep.yml @@ -1,7 +1,7 @@ # Usage: semgrep scan -f semgrep.yml rules: - id: rule-0 - message: "find http requests made not with *fiber.Ctx available" + message: "http requests made without *fiber.Ctx" languages: [go] severity: WARNING patterns: @@ -19,7 +19,6 @@ rules: message: "find http requests made to Pixiv" languages: [go] severity: INFO - # severity: INVENTORY patterns: - pattern: | http.UnwrapWebAPIRequest($A, $B) @@ -29,7 +28,6 @@ rules: message: "find http requests made to Pixiv" languages: [go] severity: INFO - # severity: INVENTORY patterns: - pattern: | http.WebAPIRequest($A, $B) @@ -54,11 +52,12 @@ rules: - id: rule-3 message: "http request without context" languages: [go] - severity: INVENTORY + severity: WARNING + # severity: INVENTORY patterns: - pattern-inside: | $REQ, $ERR := http.NewRequest($...ARGV) - $...REST + ... - pattern-not: | $REQ, $ERR := http.NewRequest($...ARGV) if $ERR != nil {