Skip to content

Add rules for '35 more Semgrep rules' blog post #166

Add rules for '35 more Semgrep rules' blog post

Add rules for '35 more Semgrep rules' blog post #166

name: semgrep-rules-test
on:
pull_request:
push:
branches:
- main
jobs:
semgrep-rules-test:
name: run semgrep rules tests
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v2
- name: Set up Python 3.9
uses: actions/setup-python@v2
with:
python-version: 3.9
- name: installation
run: |
python -m pip install --upgrade pip
python3 -m pip install semgrep
python3 -m pip install jsonschema pyyaml
- name: validations
run: |
config_args=$(
for dir in $(
find . -type d -maxdepth 1 -mindepth 1 -not -path '*/.*'
);
do
echo -n " --config $dir";
done
)
echo "Semgrep config arguments: $config_args"
semgrep scan --validate $config_args
- name: tests
run: semgrep --test --test-ignore-todo
- name: metadata-tests
run: |
wget https://raw.githubusercontent.com/returntocorp/semgrep-rules/c5ad4bb0f4c7ee5b8cd47276b582e8bb57bd0a4d/.github/scripts/validate-metadata.py
wget https://raw.githubusercontent.com/returntocorp/semgrep-rules/develop/metadata-schema.yaml.schm
python ./validate-metadata.py -s ./metadata-schema.yaml.schm -f .
- name: rules-tests
run: semgrep scan --config="r/yaml.semgrep" --severity ERROR .