ishangsf/rspec
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
5,185 Commits 329 Branches 2 Tags
Commit Graph

58 Commits

Author SHA1 Message Date
Maksim Grebeniuk
e0ab6ac55d
SONARPY-2399 update rules tags (#4553) 2024-12-04 14:08:49 +01:00
Egon Okerman
d1417e82f8
Modify CWE and OWASP Top 10 links to follow standard link format (APPSEC-1134) (#3529) 
* Fix all CWE references

* Fix all OWASP references

* Fix missing CWE prefixes
 2024-01-15 17:15:56 +01:00
Marco Borgeaud
76791bbfe8
Remove link to CERT Java from CFamily (#3296) 
Remove irrelevant links from C/C++ descriptions. No effort was made to
replace them when there wasn't already a link to CERT C. This will be
done as part of a separate effort, one day.
 2023-10-18 10:49:02 +00:00
Fred Tingaud
6f24cc0632
Clean rule at root 
In some cases, the `rule.adoc` at root of a rule is never included
anywhere and thus is dead code.
It's a maintenance cost by itself, but also it misses opportunities to
inline code that seems used by two documents when in fact only one
document is actually rendered. And this missed opportunity, in turn,
stops us from applying the correct language tag on the code samples.
 2023-10-16 16:34:38 +02:00
Antonio Aversa
a02bf814d4
Clean Code Taxonomy: add "code" to all non-obsolete metadata.json (#2793) 2023-08-04 17:19:38 +02:00
Fred Tingaud
9cb6b98e41
Remove unimplemented languages/rules tagged as 'SECURITY_HOTSPOT' or 'VULNERABILITY' 
Languages for which some unique descriptions remain are kept.

This cleaning removes the following rules that were implemented in no
language:
[S1947, S2085, S2086, S2609, S2610, S2614, S2643, S2773, S2776, S3268,
S3272, S3361]
 2023-06-22 19:13:37 +02:00
Fred Tingaud
51369b610e
Make sure that includes are always surrounded by empty lines (#2270) 
When an include is not surrounded by empty lines, its content is inlined
on the same line as the adjacent content. That can lead to broken tags
and other display issues.
This PR fixes all such includes and introduces a validation step that
forbids introducing the same problem again.
 2023-06-22 10:38:01 +02:00
Fred Tingaud
16f6c0aecf
Inline adoc when include has no additional value (#1940) 
Inline adoc files when they are included exactly once.

Also fix language tags because this inlining gives us better information
on what language the code is written in.
 2023-05-25 14:18:12 +02:00
Jamie Anderson
2d8892defb
Modify rules: Remove "owasp-aX" tag (#1655) 2023-03-16 15:25:13 +01:00
hendrik-buchwald-sonarsource
ab9e5eca5f
Modify rule S1313: Add exceptions for ranges used for documentation purposes (#1178) 2022-12-08 15:00:24 +01:00
hendrik-buchwald-sonarsource
fc94425c95
Modify rule S1313: Add exceptions for ranges used for documentation purposes 2022-11-24 13:25:40 +01:00
hendrik-buchwald-sonarsource
e6ad11b97e
Modify rule S1313: SONARKT-209, SONARKT-225 Add exceptions (#1179) 
Ip ranges used for documentation purposes
Local IPv4-mapped IPv6 addresses
 2022-11-01 10:55:46 +01:00
hendrik-buchwald-sonarsource
4947ab1954
Modify rule S1313: Add exceptions for ranges used for documentation purposes (#1219) 2022-10-28 07:42:06 +00:00
hendrik-buchwald-sonarsource
14c397c91b
Modify rule S1313: Add exceptions for ranges used for documentation purposes (#1222) 2022-10-27 12:54:22 +02:00
francoismora
0511edab95
Modify rule S1313: Add exceptions for IPv6 ranges used for documentation purposes (#1326) 2022-10-10 12:22:51 +02:00
Alban Auzeill
b65c1f1515 provide missing quickfixes information 2022-09-30 16:35:53 +02:00
hendrik-buchwald-sonarsource
38ebd9cac0
Modify rule S1313: Add exceptions for ranges used for documentation purposes (#1182) 
Update exceptions for SLang.
 2022-09-29 10:48:49 +02:00
hendrik-buchwald-sonarsource
4444c8a59f
Modify rule S1313: Add exceptions for ranges used for documentation purposes (#1183) 
Co-authored-by: Francois Mora <francois.mora@sonarsource.com>
 2022-09-26 15:11:22 +02:00
hendrik-buchwald-sonarsource
da513f2afa
Modify rule S1313: Add exceptions for ranges used for documentation purposes (#1220) 2022-09-16 16:33:55 +02:00
hendrik-buchwald-sonarsource
74e602737f
Modify rule S1313: Add exceptions for ranges used for documentation purposes (#1180) 
* Update exceptions for PHP

* Add dummy

* Remove dummy
 2022-09-13 09:38:09 +02:00
hendrik-buchwald-sonarsource
8f9692eaa6
Modify rule S1313: Add exceptions for ranges used for documentation purposes (#1184) 2022-09-12 18:02:20 +02:00
hendrik-buchwald-sonarsource
1e3c951934
Update exceptions for Python (#1181) 2022-09-01 14:11:22 +02:00
Victor
36bf421f4b
Add exceptions for S1313 for ranges used for documentation purposes (#1167) 2022-08-19 07:40:31 +02:00
pedro-oliveira-sonarsource
082b3ef269
Modify: Fix old/broken embedded links (#1100) 2022-07-08 13:58:56 +02:00
Fred Tingaud
b4161466e6
RULEAPI-661: Add syntax coloring 2022-02-04 16:28:24 +00:00
Pierre-Loup
e7ad1012e3
RULEAPI-709: Security rules are mapped to the OWASP Top 10 2021 security-standard (#545) 2021-11-01 15:00:32 +01:00
Pierre-Loup
2eb4c50a9b
RULEAPI-710: Validate that security-standards are not shadowed 2021-10-29 16:55:50 +00:00
Arseniy Zaostrovnykh
2301f5808e
RULEAPI-695: remove extra/coveredLanguages field 2021-09-28 13:36:45 +02:00
Arseniy Zaostrovnykh
ec55b6ead1
RULEAPI-687: Migrate legacy keys from Jira RSPEC (#392) 2021-09-24 09:08:46 +02:00
Arseniy Zaostrovnykh
5ba82ae371
RULEAPI-665: Remove security standards from the irrelevant language-specific rules (#362) 2021-09-21 15:40:35 +02:00
Arseniy Zaostrovnykh
f7904cebe7
RULEAPI-666: Migrate the "List of parameters", "Highlighting" and "Message" fields from jira RSPEC (#346) 2021-09-20 13:38:42 +00:00
Arseniy Zaostrovnykh
11c08de44a
Revert "RULEAPI-665: Remove security standards from the irrelevant language-specific rules" (#361) 
This reverts commit 892bccde8ffcdf2a6d662d97ec469cd63de87878.
 2021-09-17 13:50:03 +02:00
Arseniy Zaostrovnykh
892bccde8f
RULEAPI-665: Remove security standards from the irrelevant language-specific rules 2021-09-17 13:44:41 +02:00
Elena Vilchik
4017668a76
Fixes for JavaScript: remove 'Sonar way recommended' profile and legacy keys (#148) 2021-06-25 14:41:11 +02:00
Arseniy Zaostrovnykh
b76bc57083
RULEAPI-576: add a horizontal rule between rule description and comments 2021-06-08 15:52:13 +02:00
Arseniy Zaostrovnykh
6fc8e148c2
RULEAPI-644: Export security standards from Jira 2021-06-08 08:36:49 +02:00
Arseniy Zaostrovnykh
6c1ad2c13c Fix the comment display: rule-id, timestamp, GH visibility, link direction 2021-06-03 09:05:38 +02:00
Arseniy Zaostrovnykh
cdd7690a79 Export comments and rspec-to-rspec links from jira 2021-06-02 20:44:38 +02:00
Arseniy Zaostrovnykh
acadea59e9 move coveredLangauges and replacementRules into extra field 2021-02-16 17:52:17 +01:00
Arseniy Zaostrovnykh
1d713451d6 Undo the abuse of compatibleLanguages metadata field 2021-02-16 15:00:44 +01:00
Arseniy Zaostrovnykh
f543279c4b update 2021-02-15 12:31:39 +01:00
Arseniy Zaostrovnykh
b6cdecf9ea Update rules metadata 2021-02-15 10:42:33 +01:00
Arseniy Zaostrovnykh
6fe8bdf8a7 update 2021-02-12 16:35:24 +01:00
Arseniy Zaostrovnykh
a09a26d560 fix hading of {{\+}} and sort the compatible languages 2021-02-08 12:42:26 +01:00
Arseniy Zaostrovnykh
b62862646c move typescript rules to javascript directory 2021-02-08 10:49:37 +01:00
sonartech
0ffbfb133d Nightly update 2021-02-06 04:10:49 +00:00
Arseniy Zaostrovnykh
af8cda992b unescape more things 2021-02-05 10:34:25 +01:00
Arseniy Zaostrovnykh
402a7d7be3 sort metadata fields 2021-02-04 12:27:03 +01:00
Arseniy Zaostrovnykh
f6093ee186 Overapproximate compatibleLanguages and tags/standards 2021-02-02 19:11:00 +01:00
Arseniy Zaostrovnykh
1a22006270 Add coveredLanguages field 2021-01-29 15:53:23 +01:00