New rule: internal-digest-call

brave · May 3, 2024 · 0925d1f · 0925d1f
1 parent edd07a6
commit 0925d1f
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 0 deletions.
diff --git a/assets/semgrep_rules/services/internal-digest-call.py b/assets/semgrep_rules/services/internal-digest-call.py
@@ -0,0 +1,3 @@
+def signature(**kwargs):
+    # ruleid: internal-digest-call
+    sig = _INTERNAL_DIGEST_NEVER_CALL_DIRECTLY(kwargs)
diff --git a/assets/semgrep_rules/services/internal-digest-call.yaml b/assets/semgrep_rules/services/internal-digest-call.yaml
@@ -0,0 +1,9 @@
+rules:
+  - id: internal-digest-call
+    pattern-regex: _INTERNAL_DIGEST_NEVER_CALL_DIRECTLY
+    message: Internal Digest Direct Call, never call this directly
+    languages:
+      - python
+    severity: WARNING
+    metadata:
+      source: https://github.com/brave/security-action/blob/main/assets/semgrep_rules/services/indirect-digest-call.yaml