Merge pull request #1220 from yql70/main

🎨update semgrep-rules
Tencent · Feb 17, 2025 · 5c23d49 · 5c23d49
2 parents 5f538a4 + 70c94da
commit 5c23d49
Show file tree

Hide file tree

Showing 8 changed files with 5 additions and 17,820 deletions.
diff --git a/server/projects/main/apps/scan_conf/management/commands/open_source/semgrep.json b/server/projects/main/apps/scan_conf/management/commands/open_source/semgrep.json
diff --git a/server/projects/main/apps/scan_conf/management/commands/open_source_package/log4j_vul.json b/server/projects/main/apps/scan_conf/management/commands/open_source_package/log4j_vul.json
@@ -18,13 +18,6 @@
                 "rule_params": null,
                 "state": "enabled"
             },
-            {
-                "checktool": "semgrep",
-                "checkrule": "log4j-message-lookup-injection",
-                "severity": "error",
-                "rule_params": null,
-                "state": "disabled"
-            },
             {
                 "checktool": "semgrep",
                 "checkrule": "detected-log4j-core",

diff --git a/server/projects/main/apps/scan_conf/management/commands/open_source_package/safety_go.json b/server/projects/main/apps/scan_conf/management/commands/open_source_package/safety_go.json