3336 Commits

Author SHA1 Message Date
github-actions[bot]
7fbb1cf2ac
Create rule S6752: Artifactory tokens should not be disclosed (#3023) 2023-09-20 07:31:15 +00:00
SonarTech
f3df25cbfb update coverage information 2023-09-20 00:33:05 +00:00
github-actions[bot]
95d7e2c516
Create rule S6755: DigitalOcean tokens should not be disclosed (APPSEC-1063) (#3029)
You can preview this rule
[here](https://sonarsource.github.io/rspec/#/rspec/S6755/secrets)
(updated a few minutes after each push).

## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)

---------

Co-authored-by: egon-okerman-sonarsource <egon-okerman-sonarsource@users.noreply.github.com>
Co-authored-by: Egon Okerman <egon.okerman@sonarsource.com>
Co-authored-by: gaetan-ferry-sonarsource <112399173+gaetan-ferry-sonarsource@users.noreply.github.com>
2023-09-19 17:40:09 +02:00
github-actions[bot]
08a359a6ae
Create rule S6765: Figma tokens should not be disclosed (APPSEC-1075) (#3055)
You can preview this rule
[here](https://sonarsource.github.io/rspec/#/rspec/S6765/secrets)
(updated a few minutes after each push).

## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)

---------

Co-authored-by: egon-okerman-sonarsource <egon-okerman-sonarsource@users.noreply.github.com>
Co-authored-by: Egon Okerman <egon.okerman@sonarsource.com>
2023-09-19 16:55:08 +02:00
Alexander Kamushkin
ed2d2171f3
Modify rule S6766: Remove ' and " from the list of forbidden entitiles (#3099)
https://github.com/SonarSource/SonarJS/issues/4178
2023-09-19 16:21:48 +02:00
github-actions[bot]
496edb7d4a
Create rule S6753: Zuplo (APPSEC-1067) (#3026)
You can preview this rule
[here](https://sonarsource.github.io/rspec/#/rspec/S6753/secrets)
(updated a few minutes after each push).

## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)

---------

Co-authored-by: sebastien-andrivet-sonarsource <sebastien-andrivet-sonarsource@users.noreply.github.com>
Co-authored-by: sebastien-andrivet-sonarsource <sebastien.andrivet@sonarsource.com>
2023-09-19 15:32:25 +02:00
Alejandro Álvarez Ayllón
7e7b20a0c5
Modify rule S1763: Adapt to LaYC
Co-authored-by: Fred Tingaud <95592999+frederic-tingaud-sonarsource@users.noreply.github.com>
2023-09-19 10:35:46 +02:00
Marco Borgeaud
ebe334e961
Modify rule S4999,S5000: LaYC format (#2712) 2023-09-19 08:14:39 +02:00
SonarTech
9c913cc26f update coverage information 2023-09-19 00:32:45 +00:00
github-actions[bot]
09a3ffc000
Create rule S6768: Typeform tokens should not be disclosed (APPSEC-1071) (#3066)
You can preview this rule
[here](https://sonarsource.github.io/rspec/#/rspec/S6768/secrets)
(updated a few minutes after each push).

## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)

---------

Co-authored-by: egon-okerman-sonarsource <egon-okerman-sonarsource@users.noreply.github.com>
Co-authored-by: Egon Okerman <egon.okerman@sonarsource.com>
2023-09-18 18:55:38 +02:00
Loris S
7b4a60b537
Modify S6337: Validation (#3085)
## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)
2023-09-18 17:43:12 +02:00
daniel-teuchert-sonarsource
aa1d8509a5
APPSEC-1087: S6413 Improve RSPEC (#3091)
## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)

---------

Co-authored-by: Loris S. <91723853+loris-s-sonarsource@users.noreply.github.com>
2023-09-18 17:25:58 +02:00
github-actions[bot]
a8bb67f631
Create rule S6762: Grafana tokens should not be disclosed (APPSEC-1065) (#3046)
You can preview this rule
[here](https://sonarsource.github.io/rspec/#/rspec/S6762/secrets)
(updated a few minutes after each push).

## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)

---------

Co-authored-by: egon-okerman-sonarsource <egon-okerman-sonarsource@users.noreply.github.com>
Co-authored-by: Egon Okerman <egon.okerman@sonarsource.com>
2023-09-18 12:09:53 +02:00
github-actions[bot]
5045a4910c
Create rule S6774: React components should validate prop types (#3078) 2023-09-18 11:46:47 +02:00
github-actions[bot]
40561d6627
Create rule S6775: All defaultProps should have non-required PropType (#3082)
https://github.com/SonarSource/SonarJS/issues/4134
2023-09-18 11:31:32 +02:00
github-actions[bot]
87b1749628
Create rule S6778: Showcase RSPEC with 2 frameworks 2023-09-17 00:35:11 +02:00
SonarTech
fddd2674b8 update coverage information 2023-09-16 00:32:42 +00:00
github-actions[bot]
f86fdce98e
Create rule S6620 Sample rule that showcases advanced features of Asciidoc in rules 2023-09-15 16:35:15 +02:00
daniel-teuchert-sonarsource
064ed8c8f1
APPSEC-1049: S6388 Improve code examples (#3084)
This PR improves the examples for S6388.
## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)
2023-09-15 16:18:29 +02:00
github-actions[bot]
d386e4a699
Create rule S6764: WakaTime (APPSEC-1069) (#3052)
You can preview this rule
[here](https://sonarsource.github.io/rspec/#/rspec/S6764/secrets)
(updated a few minutes after each push).

## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)

---------

Co-authored-by: sebastien-andrivet-sonarsource <sebastien-andrivet-sonarsource@users.noreply.github.com>
Co-authored-by: sebastien-andrivet-sonarsource <sebastien.andrivet@sonarsource.com>
2023-09-15 15:34:28 +02:00
github-actions[bot]
054bdfb71c
Create rule S6751: PyPI tokens should not be disclosed (APPSEC-1073) (#3021)
You can preview this rule
[here](https://sonarsource.github.io/rspec/#/rspec/S6751/secrets)
(updated a few minutes after each push).

## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)

---------

Co-authored-by: egon-okerman-sonarsource <egon-okerman-sonarsource@users.noreply.github.com>
Co-authored-by: Egon Okerman <egon.okerman@sonarsource.com>
2023-09-15 15:25:35 +02:00
Peter Trifanov
83c164cac3
Modify rule S6584: Add message and highlighting, remove apk in favor of apt (#3071) 2023-09-15 15:21:37 +02:00
Loris S
aeb61ecc7d
Modify S6335: Validation (#3083)
## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)
2023-09-15 15:07:15 +02:00
github-actions[bot]
e98468bc98
Create rule S6772: Spacing between inline elements should be explicit (#3075)
https://github.com/SonarSource/SonarJS/issues/4143
2023-09-15 14:37:46 +02:00
github-actions[bot]
5e318dfb5b
Create rule S6773: Hashicorp tokens should not be disclosed (#3077)
You can preview this rule
[here](https://sonarsource.github.io/rspec/#/rspec/S6773/secrets)
(updated a few minutes after each push).

## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)

---------

Co-authored-by: sebastien-andrivet-sonarsource <sebastien-andrivet-sonarsource@users.noreply.github.com>
Co-authored-by: sebastien-andrivet-sonarsource <sebastien.andrivet@sonarsource.com>
2023-09-15 14:31:33 +02:00
github-actions[bot]
06e4b6313d
Create rule S6758: NPM access tokens should not be disclosed (APPSEC-1064) (#3041)
You can preview this rule
[here](https://sonarsource.github.io/rspec/#/rspec/S6758/secrets)
(updated a few minutes after each push).

## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)

---------

Co-authored-by: egon-okerman-sonarsource <egon-okerman-sonarsource@users.noreply.github.com>
Co-authored-by: Egon Okerman <egon.okerman@sonarsource.com>
2023-09-15 14:20:15 +02:00
Alejandro Álvarez Ayllón
d22709e54f
Modify rule S905: Adapt for LaYC
Co-authored-by: Balázs Benics <108414871+balazs-benics-sonarsource@users.noreply.github.com>
2023-09-15 09:03:39 +00:00
SonarTech
cc61ca8dfa update coverage information 2023-09-15 00:32:48 +00:00
Loris S
8df177e2a1
Modify S6334: Make the description consistent and add sample (#3069)
## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)

---------

Co-authored-by: daniel-teuchert-sonarsource <141642369+daniel-teuchert-sonarsource@users.noreply.github.com>
2023-09-14 17:45:21 +02:00
Loris S
80179dd99b
Modify S6290(secrets): Validation (#3079)
## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)

---------

Co-authored-by: daniel-teuchert-sonarsource <141642369+daniel-teuchert-sonarsource@users.noreply.github.com>
2023-09-14 15:10:18 +00:00
Peter Trifanov
89c4343dd1
Modify rule S6581: Update message, rephrase wording for LaYC format (#3076) 2023-09-14 16:11:59 +02:00
Michael Jabbour
cc7bfe8518
Modify rule S5523: Correct spec and update metadata (#3054)
- Metadata is updated so that it is consistent with the metadata of the
new MISRA rule M23_321. See SonarSource/sonar-cpp#3006.
- Correct the spec since the implementation has been updated later so
that it raises only on built-in and pointer types. See
SonarSource/sonar-cpp#684.

## Review

A dedicated reviewer checked the rule description successfully for:

- [x] logical errors and incorrect information
- [x] information gaps and missing content
- [x] text style and tone
- [x] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)
2023-09-14 15:52:18 +02:00
github-actions[bot]
5ad8095d83
Create rule S6770: User-defined JSX components should use Pascal case (#3073) 2023-09-14 15:18:20 +02:00
Marco Borgeaud
915ef808a2
RULEAPI-788 Turn diff-view validation on (#2883) 2023-09-14 12:03:01 +02:00
Loris S
84d9a3c065
Modify S6338: Improve samples (#3072)
## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)
2023-09-14 11:50:10 +02:00
daniel-teuchert-sonarsource
c8a953286f
APPSEC-1083: S6382 Fixed incorrect ARM examples (#3056)
## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)

---------

Co-authored-by: Loris S. <91723853+loris-s-sonarsource@users.noreply.github.com>
2023-09-14 11:41:28 +02:00
github-actions[bot]
e61222637f
Create rule S6766: JSX special characters should be escaped (#3057)
https://github.com/SonarSource/SonarJS/issues/4139
2023-09-14 11:15:57 +02:00
Rudy Regazzoni
30036c6eb4
Modify rule S6388: Remove diff-id on compliant example without non-compliant equivalent (#3070)
## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)

[Related
issue](https://github.com/SonarSource/rspec/pull/1925#pullrequestreview-1624869461)
2023-09-14 09:56:56 +02:00
github-actions[bot]
e4e7d4738e
Create rule S6767: Unused React typed props should be removed (#3059) 2023-09-14 09:39:26 +02:00
SonarTech
70f705394d update coverage information 2023-09-14 00:33:59 +00:00
Egon Okerman
a9c9fb99ff
Modify rule S4423, S6378, S6387, S6656: Fix diff view errors in ARM examples (#3067)
## Review

A dedicated reviewer checked the rule description successfully for:

- [x] logical errors and incorrect information
- [x] information gaps and missing content
- [x] text style and tone
- [x] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)
2023-09-13 17:48:09 +02:00
Marco Borgeaud
3075880d75
Modify rule S127: fix diff-id and diff-type (#3035) 2023-09-13 16:44:16 +02:00
Marco Borgeaud
11a2f3acbd
Modify rule S2251: fix diff-id (#3036) 2023-09-13 16:39:32 +02:00
github-actions[bot]
a630b5dd26
Create rule S6759: React props should be read-only (#3043) 2023-09-13 15:58:40 +02:00
daniel-teuchert-sonarsource
9a888ec176
APPSEC-1082 Validate S6381 ARM (#3022)
## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)
2023-09-13 15:50:36 +02:00
daniel-teuchert-sonarsource
c02882ec9f
APPSEC-1082: S6381 Adjust code examples so that they can be scanned by Sonarqube (#3050)
This PR adjusts the JSON code examples and adds a name field that is
needed for the files to be recognized by sonar-iac-plugin.

## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)
2023-09-13 15:49:57 +02:00
daniel-teuchert-sonarsource
b22dae5811
APPSEC-1080: S6364 Adjust the retention period of the compliant examples (#3049)
This PR adjusts the retention period from the compliant examples so that
they do not raise security hotspots when scanned with the Sonarway
profile.

## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)
2023-09-13 15:49:15 +02:00
daniel-teuchert-sonarsource
9f5a87c298
Arm/make examples schema compliant (#3047)
This PR changes the JSON examples for ARM rules to make sure that the
code samples will be scanned by sonar-iac-plugin.
To ensure this all resources need a name field and the schema URL has to
be an https and not http URL.

## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)
2023-09-13 15:48:50 +02:00
daniel-teuchert-sonarsource
2b6572864d
APPSEC-1077: S6329 Improve examples fso that they can be scanned with sonar-iac (#3048)
This PR fixes the code examples for ARM for rule S6329 so that they can
be scanned with Sonarqube.
The schema URL for the JSON examples has to be https and for the bicep
examples, the correct quotes need to be used.

## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)
2023-09-13 15:48:25 +02:00
Rudy Regazzoni
d2c8e2fdad
Modify rule S6388: Add language AzureResourceManager (Bicep) (#1925)
Specification ticket:
https://sonarsource.atlassian.net/browse/SONARIAC-759
2023-09-13 15:29:57 +02:00