Comments (1)
Research resulted in an understanding of our internal sgrep process.
We believe we can make sgrep better by concentrating on the local experience and making it super fast to iterate.
We understand the next set of work now:
- 1 sgrep panel in Bento website
-
- Will default to platform with results tab open
-
- Might spend a couple cycles thinking through Triager and Platform to merge the two.
Extra credit will be:
An sgrep landing page idea (not needed now but might be nice)
from semgrep.
Related Issues (20)
- Investigate speed of prefilter computation HOT 2
- Variable name metavariables don't seem to match when they should for C++ HOT 1
- pnpm dependency errors causes ci scans to crash and never report HOT 2
- In latest semgrep severity filter is broken HOT 2
- Field "fix" is not dumped in SARIF reports HOT 1
- Metavariable's range of multi-line string in yaml is incorrect. HOT 1
- Semgrep v1.46.0 `--sarif` flag error `Object of type ErrorType is not JSON serializable` HOT 11
- Please make it possible to opt-out of dotfiles filter HOT 2
- ellipsis metavariable not matching with pattern-inside
- Cannot analyze C++ class definitions HOT 3
- View results link should be specific to repo and branch
- DockerHub image returntocorp/semgrep:latest tag pointing to 1.46.0 HOT 7
- [homebrew] need to exclude `python-click` from the resource list HOT 1
- Consider using GitHub Container Registry as well as Docker Hub
- Taint engine does not correctly propagate taint to context managers with the `async` keyword
- Syntax bug with HCL Vault policy control groups
- Pro Engine seems to break on ARM64
- for php/symfony project, returning new RedirectResponse($url); response is not flagged in rule php.symfony.security.audit.symfony-non-literal-redirect.symfony-non-literal-redirect HOT 2
- Support constant number macro in C++ HOT 1
- Rust: expressions not detected inside function-like macros HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from semgrep.