7e0abe3c7e
* add semgrep yml * add semgrep ci job * remove replication semgrep rule in oss * fix makefile * add semgrep to ci * upwind triple if in ui.go semgrep refactoring
22 lines
690 B
YAML
22 lines
690 B
YAML
rules:
|
|
- id: hmac-needs-new
|
|
patterns:
|
|
- pattern-either:
|
|
- pattern: |
|
|
$H := $HASH.New()
|
|
...
|
|
$FUNC := func() hash.Hash { return $H }
|
|
...
|
|
hmac.New($FUNC, ...)
|
|
- pattern: |
|
|
$H := $HASH.New()
|
|
...
|
|
hmac.New(func() hash.Hash { return $H }, ...)
|
|
|
|
- pattern: |
|
|
hmac.New(func() hash.Hash { return ( $H : hash.Hash) }, ...)
|
|
|
|
message: "calling hmac.New with unchanging hash.New"
|
|
languages: [go]
|
|
severity: ERROR
|