3150 Commits

Author SHA1 Message Date
Marco Kaufmann
a8a91b23f7
Modify rule S1994: reworked rule description for LaYC format (#2889) 2023-08-17 14:54:01 +02:00
Marco Kaufmann
7e11ea7299
Modify rule S2251: reworked rule description for LaYC format (#2886) 2023-08-17 14:53:18 +02:00
github-actions[bot]
ae93071324
Create rule S2245: Add "Using pseudorandom number generators (PRNGs) is security-sensitive" to Go (#2824)
You can preview this rule
[here](https://sonarsource.github.io/rspec/#/rspec/S2245/go) (updated a
few minutes after each push).

## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)

---------

Co-authored-by: sebastien-andrivet-sonarsource <sebastien-andrivet-sonarsource@users.noreply.github.com>
Co-authored-by: sebastien-andrivet-sonarsource <sebastien.andrivet@sonarsource.com>
2023-08-17 14:25:58 +02:00
github-actions[bot]
b5aa16faa3
Create rule S4507: Add "Delivering code in production with debug features activated is security-sensitive" to Go (#2858)
You can preview this rule
[here](https://sonarsource.github.io/rspec/#/rspec/S4507/go) (updated a
few minutes after each push).

## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)

---------

Co-authored-by: sebastien-andrivet-sonarsource <sebastien.andrivet@sonarsource.com>
Co-authored-by: sebastien-andrivet-sonarsource <138577785+sebastien-andrivet-sonarsource@users.noreply.github.com>
Co-authored-by: Jamie Anderson <127742609+jamie-anderson-sonarsource@users.noreply.github.com>
2023-08-17 14:25:28 +02:00
erwan-serandour-sonarsource
ef25af53bc
SONARJAVA-4563 S1258 update documentation to support new annotation (#2899) 2023-08-17 14:18:19 +02:00
github-actions[bot]
a15c1733db
Create rule S6547(C#): Environment variables should not be defined from untrusted input (#2875)
You can preview this rule
[here](https://sonarsource.github.io/rspec/#/rspec/S6547/csharp)
(updated a few minutes after each push).

## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)

---------

Co-authored-by: daniel-teuchert-sonarsource <daniel-teuchert-sonarsource@users.noreply.github.com>
Co-authored-by: Daniel Teuchert <daniel.teuchert@sonarsource.com>
Co-authored-by: daniel-teuchert-sonarsource <141642369+daniel-teuchert-sonarsource@users.noreply.github.com>
Co-authored-by: Loris S. <91723853+loris-s-sonarsource@users.noreply.github.com>
2023-08-17 12:58:46 +02:00
Anton Haubner
52b830187d
Modify rule S935: Fix ruleSpecification value in metadata (#2895) 2023-08-17 10:55:56 +02:00
Irina Batinic
5829684329
Modify rule S135: Update rule description according to the LaYC (#2888) 2023-08-16 15:21:28 +02:00
github-actions[bot]
10cb45778a
Create rule S4423: add Go (APPSEC-905) (#2830)
Research ticket:
[APPSEC-905](https://sonarsource.atlassian.net/browse/APPSEC-905)

You can preview this rule
[here](https://sonarsource.github.io/rspec/#/rspec/S4423/go) (updated a
few minutes after each push).

## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)



[APPSEC-905]:
https://sonarsource.atlassian.net/browse/APPSEC-905?atlOrigin=eyJpIjoiNWRkNTljNzYxNjVmNDY3MDlhMDU5Y2ZhYzA5YTRkZjUiLCJwIjoiZ2l0aHViLWNvbS1KU1cifQ

---------

Co-authored-by: egon-okerman-sonarsource <egon-okerman-sonarsource@users.noreply.github.com>
Co-authored-by: Egon Okerman <egon.okerman@sonarsource.com>
2023-08-16 13:53:27 +02:00
chrislain-razafimahefa-sonarsource
d6296c69f4
Modify rule S6466: Fix typos (#2890) 2023-08-16 13:35:16 +02:00
github-actions[bot]
adac450cab
Create rule S2612: add Go (APPSEC-908) (#2869)
You can preview this rule
[here](https://sonarsource.github.io/rspec/#/rspec/S2612/go) (updated a
few minutes after each push).

## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)

---------

Co-authored-by: egon-okerman-sonarsource <egon-okerman-sonarsource@users.noreply.github.com>
Co-authored-by: Egon Okerman <egon.okerman@sonarsource.com>
2023-08-16 11:42:20 +02:00
Antonio Aversa
1288ef29bf
Modify rules S1186, S2589, S2953: Fix incorrect use of diff blocks (#2884)
Related to
https://discuss.sonarsource.com/t/layc-diff-view-validation/15392

Fixes remaining issues for C#, VB.NET and VB6.

## Review

A dedicated reviewer checked the rule description successfully for:

- [x] logical errors and incorrect information
- [x] information gaps and missing content
- [x] text style and tone
- [x] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)
2023-08-16 10:45:12 +02:00
Marco Kaufmann
d27acc7bf1
Modify rule S4838: reworked rule description for LayC format [SONARJAVA-4578] (#2885) 2023-08-16 10:26:18 +02:00
Leonardo Pilastri
898f00a110 Diff blocks: fix incorrect use for kotlin 2023-08-16 10:09:30 +02:00
SonarTech
702f3eb797 update coverage information 2023-08-16 00:33:49 +00:00
github-actions[bot]
4532785786
Create rule S5332: Using clear-text protocols is security-sensitive (Go support) (#2874)
You can preview this rule
[here](https://sonarsource.github.io/rspec/#/rspec/S5332/go) (updated a
few minutes after each push).

Related tickets:
* Research ticket:
[APPSEC-898](https://sonarsource.atlassian.net/browse/APPSEC-898)
* Implementation ticket (HTTP):
[SONARSLANG-605](https://sonarsource.atlassian.net/browse/SONARSLANG-605)
* Implementation ticket (FTP):
[SONARSLANG-604](https://sonarsource.atlassian.net/browse/SONARSLANG-604)
* Implementation ticket (SMTP):
[SONARSLANG-603](https://sonarsource.atlassian.net/browse/SONARSLANG-603)

## Review

A dedicated reviewer checked the rule description successfully for:

- [x] logical errors and incorrect information
- [x] information gaps and missing content
- [x] text style and tone
- [x] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)
2023-08-15 17:11:21 +01:00
Irina Batinic
e2dec3882d
Modify rule S1751: Update rule description according to the LaYC (#2881)
Co-authored-by: Marco Kaufmann <83189575+kaufco@users.noreply.github.com>
2023-08-15 17:28:14 +02:00
Marco Kaufmann
ff2b22601a
Modify rule S2272: reworked rule description for LaYC format (#2872) 2023-08-15 15:20:53 +00:00
Marco Kaufmann
74437e0a15
Modify rule S4348: reworked rule description for LaYC format (#2873) 2023-08-15 17:18:52 +02:00
Irina Batinic
76c34b093a
Modify rule S2189: Update rule description according to the LaYC (#2880) 2023-08-15 16:49:04 +02:00
Marco Borgeaud
1c405e4c3a
Diff blocks: fix incorrect use for vbnet (#2807) 2023-08-15 14:22:05 +02:00
Marco Borgeaud
57c303541e
Diff blocks: fix some incorrect use for csharp (#2799) 2023-08-15 14:19:27 +02:00
Marco Borgeaud
ffde1ebd9a
Diff blocks: fix some incorrect use for kotlin (#2803)
Improvement identified in #2790.

Add a prefix to the diff-id when it is used multiple times in different
"how to fix it in XYZ" sections to avoid ambiguity and pedantically
follow the spec:

> A single and unique diff-id should be used only once for each type of
code example as shown in the description of a rule.

Obvious typos around `diff-id` were fixed.
2023-08-15 13:34:10 +02:00
Marco Borgeaud
dde2f675f7
Diff blocks: fix incorrect use for CFamily
Fix the remaining issues in the CFamily.
2023-08-15 12:07:06 +02:00
Marco Borgeaud
4aee7ce2d6
Diff blocks: fix incorrect use for swift (#2805)
Improvement identified in #2790.

Add a prefix to the diff-id when it is used multiple times in different
"how to fix it in XYZ" sections to avoid ambiguity and pedantically
follow the spec:

> A single and unique diff-id should be used only once for each type of
code example as shown in the description of a rule.
2023-08-15 11:52:10 +02:00
github-actions[bot]
00bca507ba
Create rule S6466: Accessing array element should not trigger an ArrayIndexOutOfBoundException (#2409) 2023-08-15 11:01:26 +02:00
Marco Borgeaud
210246f5d8
Diff blocks: fix incorrect use for CFamily
Improvement identified in #2790.

Add a prefix to the diff-id when it is used multiple times in different
"how to fix it in XYZ" sections to avoid ambiguity and pedantically
follow the spec:

> A single and unique diff-id should be used only once for each type of
code example as shown in the description of a rule.

Obvious typos around `diff-type` were fixed.
2023-08-15 10:14:59 +02:00
Marco Kaufmann
ebbaeba526
Modify rule S6632: fixed tags (#2879) 2023-08-15 10:12:10 +02:00
Marco Kaufmann
ee26f0b837
Modify rule S6629: fixed tags (#2878) 2023-08-15 10:11:41 +02:00
Marco Kaufmann
7e054f70c1
Modify rule S6627: fixed tags (#2877) 2023-08-15 10:11:16 +02:00
Marco Kaufmann
8b3ce97956
Modify rule S6628: fixed tags (#2876) 2023-08-15 10:10:46 +02:00
Marco Borgeaud
95ce8c6119
Diff blocks: fix some incorrect use for javascript (#2802)
Improvement identified in #2790.

Add a prefix to the diff-id when it is used multiple times in different
"how to fix it in XYZ" sections to avoid ambiguity and pedantically
follow the spec:

> A single and unique diff-id should be used only once for each type of
code example as shown in the description of a rule.

Obvious typos around `diff-type` were fixed.
2023-08-15 09:43:48 +02:00
hendrik-buchwald-sonarsource
6d2e23d4c5
Add multiple impacts for CCT (#2871) 2023-08-14 14:50:11 +02:00
SonarTech
442194d295 update coverage information 2023-08-12 00:33:06 +00:00
github-actions[bot]
b352c03033
Create rule S6706: Cryptographic private keys should not be disclosed (#2867) 2023-08-11 17:33:20 +02:00
github-actions[bot]
43ff9aa289
Create rule S6704: Riot API keys should not be disclosed (#2864) 2023-08-11 15:27:14 +00:00
leonardo-pilastri-sonarsource
969a566a0d
Diff blocks: fix some incorrect use for java (#2866) 2023-08-11 16:49:04 +02:00
github-actions[bot]
ed58ecf2da
Create rule S6705: OpenWeather API keys should not be disclosed (#2865) 2023-08-11 14:42:25 +00:00
Johann Beleites
8ea71addf5
Modify rule S2274: Improve compliant solution (#2868) 2023-08-11 16:35:13 +02:00
github-actions[bot]
7da41a60be
Create rule S6701: Telegram bot keys should not be disclosed (#2861) 2023-08-11 13:57:33 +00:00
github-actions[bot]
79647231c4
Create rule S6702: SonarQube tokens should not be disclosed (#2862) 2023-08-11 15:53:39 +02:00
github-actions[bot]
5939aa918f
Create rule S6703: Database passwords should not be disclosed (#2863) 2023-08-11 15:35:42 +02:00
leonardo-pilastri-sonarsource
5e84629ded
Modify rule S2273: LaYC format (#2849) 2023-08-11 15:13:07 +02:00
Johann Beleites
873716a431
Modify rule S2274: Update in line with LayC (SONARJAVA-4495) (#2841) 2023-08-11 12:15:57 +00:00
github-actions[bot]
d54de6f117
Create rule S6699: Spotify API secrets should not be disclosed (#2855) 2023-08-11 12:17:49 +02:00
github-actions[bot]
5377fe4f2e
Create rule S6700: RapidAPI keys should not be disclosed (#2859) 2023-08-11 08:20:30 +00:00
github-actions[bot]
ac8f751835
Create rule S2589: Add VB.NET (#2856) 2023-08-11 09:57:19 +02:00
github-actions[bot]
d228e7d40b
Create rule S6698: PostgreSQL database passwords should not be disclosed (#2854) 2023-08-11 07:56:54 +00:00
github-actions[bot]
bfb7e0e907
Create rule S2583: Add VB.NET (#2857) 2023-08-11 09:56:44 +02:00
github-actions[bot]
7043cfd458
Create rule S6697: MySQL database passwords should not be disclosed (#2851) 2023-08-11 09:53:59 +02:00