New Published Rules - uniswap.npm-package-in-action-not-pinned-to-commit-sha

[semgrep-dev-pr-bot]

Wahoo! New published rules with uniswap.npm-package-in-action-not-pinned-to-commit-sha from @morgan.roman@uniswap.org.

See semgrep.dev/s/RelOq for more details.

Thanks for your contribution! ❤️

[mr-uniswap]

Special thanks to @kurt-r2c

[0xDC0DE]

It looks like the rule was deleted again by the testcode.

Currently the CI thinks the testcode is an invalid Semgrep rule.
Typically for rules targetting yaml code, we use the extension .test.yaml for the testcode. Example here: https://github.com/semgrep/semgrep-rules/tree/develop/yaml/argo/security

[kurt-r2c]

Opened a bug for this publish issue - it looks like we don't create PRs for YAML-targeted stuff correctly.