Merge Develop into Release #3494
Closed
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![r2c-argo[bot]](https://avatars.githubusercontent.com/u/29760937?s=60&v=4){kind=small}
test plan: make test
* PHP tainted exec When user input is passed to a function that executes a shell command, without escaping. * Correct message string YAML operator Co-authored-by: Pieter De Cremer (Semgrep) <pieter@r2c.dev> --------- Co-authored-by: Pieter De Cremer (Semgrep) <pieter@r2c.dev> Co-authored-by: Lewis <LewisArdern@live.co.uk>
* Upload dockerd socket mount detection rule and test file * Update dockerd-socket-mount.dockerfile * Update documentbuilderfactory-disallow-doctype-decl-missing.yaml Update the rule for checking if FEATURE_SECURE_PROCESSING is set to TRUE for DocumentBuilderFactory object. * Revert "Update documentbuilderfactory-disallow-doctype-decl-missing.yaml" This reverts commit c1e2281. --------- Co-authored-by: Pieter De Cremer (Semgrep) <pieter@r2c.dev>
* Switch to osemgrep test --experimental test plan: wait for green CI check * comment * comments
* remove fingerprints/fingerprints.yaml No idea what this file is, but it's annoying because we have to skip it in many scripts because it does not contain regular rules and target test files. Let's just remove it to simplify things. test plan: wait for green CI checks * remove every use of fingerprints (each time it was to skip the dir)
test plan: osemgrep test on those dirs do not report any more warnings about wrong annotations
test plan: wait for green CI checks
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Created automatically with the Argo bot using the Argo workflow in release-workflow.yaml