JonKazama-Hellion/HellionChat
1
0
Fork 0
Code Issues 1 Pull Requests Actions Releases 28 Activity

ci: fix semgrep rule ID for csharp-sqli exclusion
Security / scan (push) Successful in 14s
Details

Browse Source 
Semgrep rule IDs follow the pattern <pack>.<rule>. The pack name is
csharp.lang.security.sqli.csharp-sqli and the rule inside it is also
called csharp-sqli, so the full ID needs the trailing .csharp-sqli
again. Without it the exclude flag silently filters a different
subset of rules and the actual rule still runs.
This commit is contained in:
Jon Kazama
2026-05-09 12:08:08 +02:00
parent 90a4544ab2
commit 03da6d58a4
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitea/workflows/security.yml
+1 -1
View File
@@ -17,5 +17,5 @@ jobs:
# local-only inside a Dalamud plugin. Semgrep matches the pattern # local-only inside a Dalamud plugin. Semgrep matches the pattern
# without dataflow, so it flags those eight call sites; CodeQL # without dataflow, so it flags those eight call sites; CodeQL
# would not. Suppressed for this repo only. # would not. Suppressed for this repo only.
semgrep-exclude-rules: 'csharp.lang.security.sqli.csharp-sqli' semgrep-exclude-rules: 'csharp.lang.security.sqli.csharp-sqli.csharp-sqli'