Skip to content

SONARRUBY-96 Update rule metadata #78

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
dorian-burihabwa-sonarsource merged 1 commit into from
Nov 27, 2025
Merged

SONARRUBY-96 Update rule metadata #78

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion sonar-ruby-plugin/sonarpedia.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@
"languages": [
"RUBY"
],
"latest-update": "2025-05-05T13:56:25.455410100Z",
"latest-update": "2025-11-26T09:09:53.433355Z",
"options": {
"no-language-in-filenames": true,
"preserve-filenames": true
Expand Down
1 change: 0 additions & 1 deletion sonar-ruby-plugin/src/main/resources/org/sonar/l10n/ruby/rules/ruby/S104.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -13,7 +13,6 @@
"constantCost": "1h"
},
"tags": [
"architecture",
"brain-overload"
],
"defaultSeverity": "Major",
Expand Down
4 changes: 2 additions & 2 deletions sonar-ruby-plugin/src/main/resources/org/sonar/l10n/ruby/rules/ruby/S1313.html
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
<p>Hardcoding IP addresses is security-sensitive. It has led in the past to the following vulnerabilities:</p>
<ul>
<li> <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5901">CVE-2006-5901</a> </li>
<li> <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3725">CVE-2005-3725</a> </li>
<li> <a href="https://www.cve.org/CVERecord?id=CVE-2006-5901">CVE-2006-5901</a> </li>
<li> <a href="https://www.cve.org/CVERecord?id=CVE-2005-3725">CVE-2005-3725</a> </li>
</ul>
<p>Today’s services have an ever-changing architecture due to their scaling and redundancy needs. It is a mistake to think that a service will always
have the same IP address. When it does change, the hardcoded IP will have to be modified too. This will have an impact on the product development,
Expand Down
1 change: 0 additions & 1 deletion sonar-ruby-plugin/src/main/resources/org/sonar/l10n/ruby/rules/ruby/S138.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -13,7 +13,6 @@
"constantCost": "20min"
},
"tags": [
"architecture",
"brain-overload"
],
"defaultSeverity": "Major",
Expand Down
4 changes: 2 additions & 2 deletions sonar-ruby-plugin/src/main/resources/org/sonar/l10n/ruby/rules/ruby/S2068.html
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,8 +2,8 @@
for applications that are distributed or that are open-source.</p>
<p>In the past, it has led to the following vulnerabilities:</p>
<ul>
<li> <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13466">CVE-2019-13466</a> </li>
<li> <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15389">CVE-2018-15389</a> </li>
<li> <a href="https://www.cve.org/CVERecord?id=CVE-2019-13466">CVE-2019-13466</a> </li>
<li> <a href="https://www.cve.org/CVERecord?id=CVE-2018-15389">CVE-2018-15389</a> </li>
</ul>
<p>Credentials should be stored outside of the code in a configuration file, a database, or a management service for secrets.</p>
<p>This rule flags instances of hard-coded credentials used in database and LDAP connections. It looks for hard-coded credentials in connection
Expand Down
1 change: 0 additions & 1 deletion sonar-ruby-plugin/src/main/resources/org/sonar/l10n/ruby/rules/ruby/S3776.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -15,7 +15,6 @@
"linearFactor": "1min"
},
"tags": [
"architecture",
"brain-overload"
],
"defaultSeverity": "Critical",
Expand Down
1 change: 0 additions & 1 deletion sonar-ruby-plugin/src/main/resources/org/sonar/l10n/ruby/rules/ruby/Sonar_way_profile.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,7 +1,6 @@
{
"name": "Sonar way",
"ruleKeys": [
"ParsingError",
Copy link
Contributor Author

@tomasz-tylenda-sonarsource tomasz-tylenda-sonarsource Nov 26, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This was removed and I do not know why, so I am planning to keep it.

Copy link
Contributor Author

@tomasz-tylenda-sonarsource tomasz-tylenda-sonarsource Nov 26, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It was removed intentionally: https://github.com/SonarSource/rspec/pull/5935

Copy link
Contributor

@dorian-burihabwa-sonarsource dorian-burihabwa-sonarsource Nov 26, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

That is actually a problem and we received no explanation as to why it was removed. Let me go an check

"S100",
"S101",
"S107",
Expand Down
Loading