github-actions[bot]
2619fbcace
Create rule S5527: Server hostnames should be verified during SSL/TLS connections for go ( #4656 )
...
* Add go to rule S5527
* Add text
* Fix wording
* Fix wording++
* Update rules/S5527/go/how-to-fix-it/std.adoc
Co-authored-by: daniel-teuchert-sonarsource <141642369+daniel-teuchert-sonarsource@users.noreply.github.com>
* Move fix it section into the main adoc
* Fix non-compliant->noncompliant
---------
Co-authored-by: teemu-rytilahti-sonarsource <teemu-rytilahti-sonarsource@users.noreply.github.com>
Co-authored-by: Teemu Rytilahti <teemu.rytilahti@sonarsource.com>
Co-authored-by: daniel-teuchert-sonarsource <141642369+daniel-teuchert-sonarsource@users.noreply.github.com>
2025-02-12 18:31:46 +01:00
github-actions[bot]
4903879d09
Create rule S5344: Passwords should not be stored in plaintext or with a fast hashing algorithm ( #4655 )
...
* Add go to rule S5344
* Add description for S5344 for Go
* Add message
* Extend message
* Update rules/S5344/go/message.adoc
Co-authored-by: teemu-rytilahti-sonarsource <teemu.rytilahti@sonarsource.com>
* Update rules/S5344/go/message.adoc
Co-authored-by: teemu-rytilahti-sonarsource <teemu.rytilahti@sonarsource.com>
---------
Co-authored-by: daniel-teuchert-sonarsource <daniel-teuchert-sonarsource@users.noreply.github.com>
Co-authored-by: Daniel Teuchert <daniel.teuchert@sonarsource.com>
Co-authored-by: daniel-teuchert-sonarsource <141642369+daniel-teuchert-sonarsource@users.noreply.github.com>
Co-authored-by: teemu-rytilahti-sonarsource <teemu.rytilahti@sonarsource.com>
2025-02-12 10:44:28 +01:00
github-actions[bot]
c79083491d
Create rule S3329: Cipher Block Chaining IVs should be unpredictable ( #4658 )
...
* Add go to rule S3329
* Add description for S3329 for Go
* Update rules/S3329/go/rule.adoc
Co-authored-by: teemu-rytilahti-sonarsource <teemu.rytilahti@sonarsource.com>
---------
Co-authored-by: daniel-teuchert-sonarsource <daniel-teuchert-sonarsource@users.noreply.github.com>
Co-authored-by: Daniel Teuchert <daniel.teuchert@sonarsource.com>
Co-authored-by: daniel-teuchert-sonarsource <141642369+daniel-teuchert-sonarsource@users.noreply.github.com>
Co-authored-by: teemu-rytilahti-sonarsource <teemu.rytilahti@sonarsource.com>
2025-02-12 10:19:39 +01:00
github-actions[bot]
162d5baaf8
Create rule S5547: Cipher algorithms should be robust ( #4652 )
...
* Add go to rule S5547
* Add description for S5547 for Go
---------
Co-authored-by: daniel-teuchert-sonarsource <daniel-teuchert-sonarsource@users.noreply.github.com>
Co-authored-by: Daniel Teuchert <daniel.teuchert@sonarsource.com>
2025-02-10 13:30:29 +01:00
Loïc Joly
19b9e223e1
Deprecate rule S1227 (CPP-6131 and NET-1116)
2025-02-10 12:16:09 +01:00
Pavel Mikula
6ef35e2a8c
S3385: Remove Exit For, Do, While and Try ( #4654 )
2025-02-10 08:39:26 +01:00
github-actions[bot]
d9e29030ae
Create rule S2053: Password hashing functions should use an unpredictable salt ( #4648 )
...
* Add go to rule S2053
* Add description for S2053 for Go
---------
Co-authored-by: daniel-teuchert-sonarsource <daniel-teuchert-sonarsource@users.noreply.github.com>
Co-authored-by: Daniel Teuchert <daniel.teuchert@sonarsource.com>
Co-authored-by: daniel-teuchert-sonarsource <141642369+daniel-teuchert-sonarsource@users.noreply.github.com>
2025-02-06 13:14:34 +01:00
github-actions[bot]
1f6167eb91
Create rule S7197: Circular file imports should be resolved ( #4645 )
...
* Create rule S7197
* Create rule S7197: Circular file imports should be resolved
* Comments
---------
Co-authored-by: kaufco <kaufco@users.noreply.github.com>
Co-authored-by: Marco Kaufmann <marco.kaufmann@sonarsource.com>
Co-authored-by: zglicz <michal.zgliczynski@sonarsource.com>
2025-02-06 13:10:59 +01:00
github-actions[bot]
d9a7e045e9
Create rule S7134: Architectural constraints should not be violated (JavaScript) ( #4646 )
...
* Add javascript to rule S7134
* Create rule S7134: Architectural constraints should not be violated (JavaScript)
* Gab's comments
---------
Co-authored-by: kaufco <kaufco@users.noreply.github.com>
Co-authored-by: Marco Kaufmann <marco.kaufmann@sonarsource.com>
Co-authored-by: zglicz <michal.zgliczynski@sonarsource.com>
2025-02-06 08:29:54 +00:00
erwan-serandour
36d247fb3b
SONARJAVA-5322 Modify rule S7177: add tests to tags ( #4651 )
2025-02-05 15:38:28 +01:00
Ghislain Piot
c5efdf6797
SONARPY-2586 Point coverage script to the enterprise sonar-python repository ( #4649 )
2025-02-05 14:14:22 +01:00
daniel-teuchert-sonarsource
5be0d9daa7
Adjust language label for go ( #4650 )
2025-02-05 11:56:49 +01:00
leonardo-pilastri-sonarsource
1a4f63cc4d
Modify S7179: change scope from Tests to Main ( #4647 )
2025-02-03 16:48:01 +01:00
daniel-teuchert-sonarsource
071e229c14
Modify rule S4507: Add support for Flask-GraphQL ( #3428 )
...
* Added how to fix it section for flask-graphql
* Restructured code examples
* Adjusted format
* Change to allowed_framework_names not needed anymore
* Update rule.adoc
* Applied suggestion.
2025-02-03 12:08:40 +01:00
daniel-teuchert-sonarsource
fc7ed69d88
Add support for aiohttp ( #3409 )
2025-02-03 12:04:32 +01:00
daniel-teuchert-sonarsource
c1a6b0f5f5
Modify rule S4036: Fix Code Example ( #4640 )
2025-02-03 11:57:51 +01:00
github-actions[bot]
c99ad72c75
Create go rule S5542: Encryption algorithms should be used with secure mode and padding scheme ( #4631 )
...
* Add go to rule S5542
* SONARGO-136: Add S5542 for Go
* Improvements based on review
---------
Co-authored-by: daniel-teuchert-sonarsource <daniel-teuchert-sonarsource@users.noreply.github.com>
Co-authored-by: Daniel Teuchert <daniel.teuchert@sonarsource.com>
Co-authored-by: daniel-teuchert-sonarsource <141642369+daniel-teuchert-sonarsource@users.noreply.github.com>
2025-02-03 11:46:24 +01:00
erwan-serandour
8c0356d55e
SONARJAVA-5285 Modify rule S7180: update wrong rule description ( #4643 )
2025-01-31 16:58:21 +01:00
Sebastien Marichal
1e63f6a274
Modify rule S4487: Fix error in code example ( #4644 )
2025-01-31 15:47:52 +01:00
github-actions[bot]
7e54acfafa
Create go rule S5443: Using publicly writable directories is security-sensitive ( #4632 )
...
* Add go to rule S5443
* Initial draft
* Improve examples
* Add intro texts to code examples
* Remove unwanted // compliant commentary from fixed examples
---------
Co-authored-by: Teemu Rytilahti <teemu.rytilahti@sonarsource.com>
2025-01-31 11:52:04 +01:00
Peter Trifanov
14c80b84d0
[NO-JIRA] Point coverage script to the enterprise sonar-go repository ( #4635 )
2025-01-30 10:19:54 +01:00
Massimo Paladin
1168630c4e
Update GitHub CODEOWNERS ( #4630 )
2025-01-29 10:43:20 +01:00
github-actions[bot]
be17e31527
Create rule S4036 ( #4625 )
...
* Add go to rule S4036
* Add S4036 for Go
---------
Co-authored-by: daniel-teuchert-sonarsource <daniel-teuchert-sonarsource@users.noreply.github.com>
Co-authored-by: Daniel Teuchert <daniel.teuchert@sonarsource.com>
2025-01-29 09:48:53 +01:00
github-actions[bot]
8471f3d8a4
SONARJAVA-5301 Create rule S7190: Methods annotated with "@BeforeTransaction" or "@AfterTransaction" must respect the contract ( #4629 )
2025-01-28 17:14:19 +01:00
github-actions[bot]
d873f6b135
SONARJAVA-5288 Create rule S7186: Methods returning "Page" or "Slice" must take "Pageable" as an input parameter ( #4620 )
2025-01-28 16:36:02 +01:00
Nils Werner
5e12d3beff
SONARGO-175 ParsingError should be disabled by default ( #4628 )
2025-01-28 16:31:01 +01:00
leonardo-pilastri-sonarsource
4bfe5a01d7
SONARJAVA-5295 Modify rule S6809: add support for @Cacheable ( #4626 )
2025-01-28 16:15:52 +01:00
Alex Meseldzija
2dc3a33c3b
NET-1038 Add symbolic-execution tag to our rules ( #4621 )
2025-01-28 15:06:03 +01:00
github-actions[bot]
4c6681ee65
SONARJAVA-5294 Create rule S7185: @eventlistener methods should have one parameter ( #4618 )
2025-01-28 14:41:15 +01:00
leonardo-pilastri-sonarsource
ec2258b717
SONARJAVA-5293 Modify rule S6856 to also cover opposite case ( #4619 )
2025-01-28 13:24:04 +01:00
Sebastien Andrivet
2b798c3265
Modify rule S2092: Add Go language ( #2760 )
2025-01-28 11:16:42 +01:00
github-actions[bot]
35c4205143
SONARJAVA-5286 Create rule S7184: "@Scheduled" annotation should only be applied to no-arg methods ( #4617 )
2025-01-28 11:00:17 +01:00
leonardo-pilastri-sonarsource
8940eee53e
SONARJAVA-5291 Modify rule S7177: specify spring context ( #4623 )
2025-01-28 10:57:27 +01:00
github-actions[bot]
1e62d9fef8
SONARJAVA-5292 Create rule S7183: @InitBinder methods should have void return type ( #4616 )
2025-01-28 09:48:25 +01:00
SonarTech
74c4f4c8db
update coverage information
2025-01-28 02:39:23 +00:00
github-actions[bot]
8aadee1de1
SONARJAVA-5291 Create rule S7177: @DirtiesContext should be properly configured ( #4610 )
2025-01-27 15:47:41 +01:00
github-actions[bot]
46eb087a63
SONARJAVA-5285 Create rule S7180: "@Cache*" annotations should only be applied on concrete classes ( #4613 )
2025-01-27 15:43:25 +01:00
github-actions[bot]
040c9dabef
SONARJAVA-5289 Create rule S7179: @Cacheable and @CachePut should not be combined ( #4612 )
2025-01-27 11:49:43 +01:00
github-actions[bot]
11dd942825
SONARJAVA-5284 Create rule S7178: Injecting data into static fields is not supported by Spring ( #4611 )
2025-01-27 11:26:42 +01:00
Sebastien Andrivet
9a672e7951
Modify rule S3330: Add Go language ( #2770 )
...
* Modify rule S2092: Add Go language
* Fixes following review of S2092
* Remove Compliant
* Fix tabs vs spaces
* Use 4 spaces
* To trigger the build
---------
Co-authored-by: Marcin Stachniuk <marcin.stachniuk@sonarsource.com>
2025-01-24 16:46:12 +01:00
SonarTech
74ed1fa393
update coverage information
2025-01-24 02:40:11 +00:00
Pierre-Loup
bd7f201e23
Apply missing android tags to rules that support Android APIs ( #4603 )
2025-01-23 10:12:26 +01:00
Pavel Mikula
59e278c497
NET-988 Remove S1197 from SonarWay for VB.NET ( #4609 )
2025-01-20 14:31:07 +01:00
GabinL21
2e155a926e
SONARIAC-1892 Modify rule S6975: Fix how to fix it section split ( #4604 )
2025-01-20 11:46:15 +01:00
Sebastien Marichal
398cc98f7c
Modify S2930: Fix typo ( #4608 )
2025-01-10 10:36:46 +01:00
Rudy Regazzoni
519c3bbd18
SONARIAC-1856 Modify S7019: remove second example id/diff ( #4606 )
2025-01-09 14:29:50 +01:00
Martin Strecker
9cdea89191
Add perftag back ( #4605 )
2025-01-09 11:44:51 +01:00
Martin Strecker
8536b2730e
NET-936 Modify S3247: Add benchmarks ( #4596 )
...
* Add benchmark
* Adopt benchmark
* Remove Ratio column
2025-01-09 10:00:20 +00:00
Pavel Mikula
8f2f6bee31
Add PullRequesteCreated.yml ( #4584 )
...
Co-authored-by: Marco Borgeaud <marco.borgeaud@sonarsource.com>
2025-01-09 10:13:47 +01:00
Sebastien Marichal
e39e8bb76d
NET-938 Modify S2629: Add benchmarks ( #4602 )
2025-01-08 17:31:17 +01:00
