Merge pull request #3 from fuzzmaestrotest/master

adding a.text

.circleci/config.yml

@@ -1,7 +1,7 @@
 version: 2.1
 jobs:
   semgrep-scan:
-    parameters:
+    parameters: 
       default_branch:
         type: string
         default: master

.github/workflows/semgrep.yml

@@ -0,0 +1,23 @@
+on:
+  pull_request: {}
+  push:
+    branches:
+    - main
+    - master
+    paths:
+    - .github/workflows/semgrep.yml
+  schedule:
+  # random HH:MM to avoid a load spike on GitHub Actions at 00:00
+  - cron: 13 20 * * *
+name: Semgrep
+jobs:
+  semgrep:
+    name: Scan
+    runs-on: ubuntu-20.04
+    env:
+      SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }}
+    container:
+      image: returntocorp/semgrep
+    steps:
+    - uses: actions/checkout@v3
+    - run: semgrep ci

.semgrep/test.yml

@@ -0,0 +1,22 @@
+rules:
+  - id: avoid_decimal_fields_for_currency_v2
+    pattern-regex: =.+DecimalField
+    paths:
+      include:
+        - "test.py"
+      exclude:
+        - "*/**"
+    message: >
+      [best-practice]. Mongo DecimalField is not allowed for representing
+      currency in models.
+
+      Please use common.fields.CurrencyField instead, more context can be found in #currency-fields-v2-migration channel.
+
+      Note for PR author: If field that you are adding is not representing currency then feel free to /ignore it, otherwise using new Currency type is mandatory.
+    languages:
+      - python
+    severity: WARNING
+    metadata:
+      category: best-practice
+      rule-origin-note: published from
+        /src/write-better-python/avoid_decimal_fields_for_currency.yaml in None

Gemfile.lock

@@ -215,7 +215,7 @@ GEM
     pry-rails (0.3.9)
       pry (>= 0.10.4)
     public_suffix (4.0.1)
-    puma (4.3.5)
+    puma (4.3.12)
       nio4r (~> 2.0)
     rack (2.2.3)
     rack-livereload (0.3.17)
@@ -343,7 +343,7 @@ GEM
     websocket-extensions (0.1.5)
     xpath (3.2.0)
       nokogiri (~> 1.8)
-    zeitwerk (2.2.1)
+    zeitwerk (2.2.3)
 
 PLATFORMS
   ruby

test.py

@@ -0,0 +1,5 @@
+field_should_not_get_alert = fields.DecimalField(
+        blank=True,
+        precision=2,
+        precision=3,
+    )

test.txt

@@ -1,2 +1,3 @@
+
 this is a test of pipeline in CircleCI