Skip to content

Pluto 1390 semgrep installation and running #73

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
andrzej-janczak merged 7 commits into from
Apr 14, 2025

revert codacy yaml

90d4e4f
Select commit
Loading
Failed to load commit list.
Merged

Pluto 1390 semgrep installation and running #73

revert codacy yaml
90d4e4f
Select commit
Loading
Failed to load commit list.
Codacy Production / Codacy Static Code Analysis succeeded Apr 11, 2025 in 0s

Your pull request is up to standards!

Codacy found no issues in your code

Annotations

Check warning on line 13 in tools/semgrepRunner.go

See this annotation in the file changed.

@codacy-production codacy-production / Codacy Static Code Analysis

tools/semgrepRunner.go#L13 

Method RunSemgrep has a cyclomatic complexity of 8 (limit is 7)

Check failure on line 46 in tools/semgrepRunner.go

See this annotation in the file changed.

@codacy-production codacy-production / Codacy Static Code Analysis

tools/semgrepRunner.go#L46 

Detected non-static command inside Command.

Check failure on line 46 in tools/semgrepRunner.go

See this annotation in the file changed.

@codacy-production codacy-production / Codacy Static Code Analysis

tools/semgrepRunner.go#L46 

OS command injection is a critical vulnerability that can lead to a full system compromise as it may allow an adversary to pass in arbitrary commands or arguments to be executed.

Check notice on line 3 in tools/testdata/repositories/semgrep/sample.js

See this annotation in the file changed.

@codacy-production codacy-production / Codacy Static Code Analysis

tools/testdata/repositories/semgrep/sample.js#L3 

You must place screaming snake case at module scope. If this is not meant to be a module-scoped variable, use camelcase instead.

Check warning on line 5 in tools/testdata/repositories/semgrep/sample.js

See this annotation in the file changed.

@codacy-production codacy-production / Codacy Static Code Analysis

tools/testdata/repositories/semgrep/sample.js#L5 

Missing JSDoc comment.
View more details on Codacy Production