Search results

Missing state updates or optimizable state variables

Status: Open.

#3571 In semgrep/semgrep-rules;

· mingbaile opened on Feb 28, 2025

[Rust] Suggest removing unsafe-usage rule due to excessive false positives

Status: Open.

#3570 In semgrep/semgrep-rules;

· karlls12321 opened on Feb 26, 2025

GitLab Flawfinder drand48 rule ID is too long for GitHub uploads

bugSomething isn't workingSomething isn't working

Status: Open.

#3569 In semgrep/semgrep-rules;

· AdamSmith-BT opened on Feb 25, 2025

find_sec_bugs.HARD_CODE_KEY-4 returns false positives

bugSomething isn't workingSomething isn't working

Status: Open.

#3568 In semgrep/semgrep-rules;

· GiantCrocodile opened on Feb 23, 2025

False positive for terraform.azure.security.keyvault.keyvault-ensure-secret-expires.keyvault-ensure-secret-expires when setting from a function or resource

bugSomething isn't workingSomething isn't working

Status: Open.

#3564 In semgrep/semgrep-rules;

· EsgAtWorkleap opened on Feb 18, 2025

False positive for prohibit-jquery-html when retrieving HTML

bugSomething isn't workingSomething isn't working

Status: Open.

#3552 In semgrep/semgrep-rules;

· Sjord opened on Jan 29, 2025

java/lang/security/audit/xss/jsp/use-jstl-escaping: false positive because of wrong regex

bugSomething isn't workingSomething isn't working

Status: Open.

#3547 In semgrep/semgrep-rules;

· timhemel opened on Jan 15, 2025

ruby.rails.security.audit.xss.templates.unquoted-attribute.unquoted-attribute false positives

bugSomething isn't workingSomething isn't working

Status: Open.

#3539 In semgrep/semgrep-rules;

· segiddins opened on Dec 13, 2024

terraform.aws.best-practice.aws-s3-bucket-versioning-not-enabled.aws-s3-bucket-versioning-not-enabled has false positive on v5+ of the Terraform provider for AWS

bugSomething isn't workingSomething isn't working

Status: Open.

#3497 In semgrep/semgrep-rules;

· nint8835 opened on Oct 24, 2024

[Regression] unquoted-command-substitution-in-command & unquoted-variable-expansion-in-command [BASH] causes semgrep CRASH

bugSomething isn't workingSomething isn't working

Status: Open.

#3449 In semgrep/semgrep-rules;

· mjnowen opened on Aug 12, 2024

dockerfile.security.missing-user has a false positive related to HEALTHCHECK CMD

bugSomething isn't workingSomething isn't working

Status: Open.

#3436 In semgrep/semgrep-rules;

· saghaulor opened on Jul 25, 2024

ruby dangerous-exec rule did not report dangerous usages properly

bugSomething isn't workingSomething isn't working

Status: Open.

#3396 In semgrep/semgrep-rules;

· JazJas opened on Jun 7, 2024