The directory was renamed

assets/semgrep_rules/services/jinja-safe-usages.yaml

@@ -24,7 +24,7 @@ rules:
       impact: MEDIUM
       confidence: LOW
       license: Commons Clause License Condition v1.0[LGPL-2.1-only]
-      source: https://github.com/brave/security-action/blob/main/assets/semgrep_rules/web/jinja-safe-usages.yaml
+      source: https://github.com/brave/security-action/blob/main/assets/semgrep_rules/services/jinja-safe-usages.yaml
     languages:
       - regex
     paths:

assets/semgrep_rules/services/missing-noopener-window-open.yaml

@@ -18,7 +18,7 @@ rules:
       likelihood: LOW
       impact: LOW
       license: MIT
-      source: https://github.com/brave/security-action/blob/main/assets/semgrep_rules/web/missing-noopener-window-open.yaml
+      source: https://github.com/brave/security-action/blob/main/assets/semgrep_rules/services/missing-noopener-window-open.yaml
     languages:
       - generic
     paths:
@@ -78,7 +78,7 @@ rules:
       likelihood: LOW
       impact: LOW
       license: MIT
-      source: https://github.com/brave/security-action/blob/main/assets/semgrep_rules/web/missing-noopener-window-open.yaml
+      source: https://github.com/brave/security-action/blob/main/assets/semgrep_rules/services/missing-noopener-window-open.yaml
     languages:
       - typescript
       - javascript

assets/semgrep_rules/services/no-backticks-in-js-handlers.yaml

@@ -2,7 +2,7 @@ rules:
   - id: no-backticks-in-js-handlers
     metadata:
       author: Andrea Brancaleoni @ Brave
-      source: https://github.com/brave/security-action/blob/main/assets/semgrep_rules/web/no-backticks-in-js-handlers.yaml
+      source: https://github.com/brave/security-action/blob/main/assets/semgrep_rules/services/no-backticks-in-js-handlers.yaml
     patterns:
       - pattern-either:
         - pattern-inside: $HANDLER="..."

assets/semgrep_rules/services/nodejs-insecure-url-parse.yaml

@@ -2,7 +2,7 @@ rules:
   - id: nodejs-insecure-url-parse
     metadata:
       author: Andrea Brancaleoni <abc@pompel.me>
-      source: https://github.com/brave/security-action/blob/main/assets/semgrep_rules/web/nodejs-insecure-url-parse.yaml
+      source: https://github.com/brave/security-action/blob/main/assets/semgrep_rules/services/nodejs-insecure-url-parse.yaml
       assignees: |
         thypon
         fmarier

assets/semgrep_rules/services/path-travesal-by-string-interpolation.yaml

@@ -3,7 +3,7 @@ rules:
     metadata:
       author: Ben Caller
       confidence: MEDIUM
-      source: https://github.com/brave/security-action/blob/main/assets/semgrep_rules/web/path-travesal-by-string-interpolation.yaml
+      source: https://github.com/brave/security-action/blob/main/assets/semgrep_rules/services/path-travesal-by-string-interpolation.yaml
     message: The code contains new security hotspots which should be checked
       manually by a security team member! Could a user perform path traversal
       by setting a variable to include `../`?

assets/semgrep_rules/services/pip-extra-index-url.yaml

@@ -6,7 +6,7 @@ rules:
         - https://portswigger.net/daily-swig/dependency-confusion-attack-mounted-via-pypi-repo-exposes-flawed-package-installer-behavior
         - https://www.bleepingcomputer.com/news/security/pytorch-discloses-malicious-dependency-chain-compromise-over-holidays/
       confidence: LOW
-      source: https://github.com/brave/security-action/blob/main/assets/semgrep_rules/web/pip-extra-index-url.yaml
+      source: https://github.com/brave/security-action/blob/main/assets/semgrep_rules/services/pip-extra-index-url.yaml
     message: >-
       Use --index-url instead of --extra-index-url to avoid dependency confusion.
       When using --extra-index-url, pip looks on pypi.org as well as the private index.

assets/semgrep_rules/services/svelte-html-usages.yaml

@@ -7,7 +7,7 @@ rules:
         - https://cwe.mitre.org/data/definitions/615
         - https://btlr.dev/blog/how-to-find-vulnerabilities-in-code-bad-words
       confidence: LOW
-      source: https://github.com/brave/security-action/blob/main/assets/semgrep_rules/web/svelte-html-usages.yaml
+      source: https://github.com/brave/security-action/blob/main/assets/semgrep_rules/services/svelte-html-usages.yaml
     message: >-
       The code contains new security hotspots (`{@html expression}`) which should be checked manually
       by a security team member!

assets/semgrep_rules/services/svelte-purifyConfig-usage.yaml

@@ -7,7 +7,7 @@ rules:
         - https://cwe.mitre.org/data/definitions/615
         - https://btlr.dev/blog/how-to-find-vulnerabilities-in-code-bad-words
       confidence: LOW
-      source: https://github.com/brave/security-action/blob/main/assets/semgrep_rules/web/svelte-purifyConfig-usages.yaml
+      source: https://github.com/brave/security-action/blob/main/assets/semgrep_rules/services/svelte-purifyConfig-usages.yaml
     message: >-
       The code contains new security hotspots (`purifyConfig`) which should be checked manually
       by a security team member!

assets/semgrep_rules/services/url-constructor-base.yaml

@@ -5,7 +5,7 @@ rules:
       confidence: LOW
       references:
         - https://developer.mozilla.org/en-US/docs/Web/API/URL/URL#parameters
-      source: https://github.com/brave/security-action/blob/main/assets/semgrep_rules/web/url-constructor-base.yaml
+      source: https://github.com/brave/security-action/blob/main/assets/semgrep_rules/services/url-constructor-base.yaml
       assignees: |
         bcaller
         thypon

assets/semgrep_rules/services/var-in-href.yaml

@@ -32,7 +32,7 @@ rules:
       likelihood: LOW
       impact: MEDIUM
       license: Commons Clause License Condition v1.0[LGPL-2.1-only]
-      source: https://github.com/brave/security-action/blob/main/assets/semgrep_rules/web/var-in-href.yaml
+      source: https://github.com/brave/security-action/blob/main/assets/semgrep_rules/services/var-in-href.yaml
     languages:
       - generic
     paths:

assets/semgrep_rules/services/var-in-script-tag.yaml

@@ -33,7 +33,7 @@ rules:
       likelihood: LOW
       impact: MEDIUM
       license: Commons Clause License Condition v1.0[LGPL-2.1-only]
-      source: https://github.com/brave/security-action/blob/main/assets/semgrep_rules/web/var-in-script-tag.yaml
+      source: https://github.com/brave/security-action/blob/main/assets/semgrep_rules/services/var-in-script-tag.yaml
     languages:
       - generic
     paths: