3421 Commits

Author SHA1 Message Date
github-actions[bot]
87b1749628
Create rule S6778: Showcase RSPEC with 2 frameworks 2023-09-17 00:35:11 +02:00
SonarTech
fddd2674b8 update coverage information 2023-09-16 00:32:42 +00:00
github-actions[bot]
f86fdce98e
Create rule S6620 Sample rule that showcases advanced features of Asciidoc in rules 2023-09-15 16:35:15 +02:00
daniel-teuchert-sonarsource
064ed8c8f1
APPSEC-1049: S6388 Improve code examples (#3084)
This PR improves the examples for S6388.
## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)
2023-09-15 16:18:29 +02:00
github-actions[bot]
d386e4a699
Create rule S6764: WakaTime (APPSEC-1069) (#3052)
You can preview this rule
[here](https://sonarsource.github.io/rspec/#/rspec/S6764/secrets)
(updated a few minutes after each push).

## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)

---------

Co-authored-by: sebastien-andrivet-sonarsource <sebastien-andrivet-sonarsource@users.noreply.github.com>
Co-authored-by: sebastien-andrivet-sonarsource <sebastien.andrivet@sonarsource.com>
2023-09-15 15:34:28 +02:00
github-actions[bot]
054bdfb71c
Create rule S6751: PyPI tokens should not be disclosed (APPSEC-1073) (#3021)
You can preview this rule
[here](https://sonarsource.github.io/rspec/#/rspec/S6751/secrets)
(updated a few minutes after each push).

## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)

---------

Co-authored-by: egon-okerman-sonarsource <egon-okerman-sonarsource@users.noreply.github.com>
Co-authored-by: Egon Okerman <egon.okerman@sonarsource.com>
2023-09-15 15:25:35 +02:00
Peter Trifanov
83c164cac3
Modify rule S6584: Add message and highlighting, remove apk in favor of apt (#3071) 2023-09-15 15:21:37 +02:00
Loris S
aeb61ecc7d
Modify S6335: Validation (#3083)
## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)
2023-09-15 15:07:15 +02:00
github-actions[bot]
e98468bc98
Create rule S6772: Spacing between inline elements should be explicit (#3075)
https://github.com/SonarSource/SonarJS/issues/4143
2023-09-15 14:37:46 +02:00
github-actions[bot]
5e318dfb5b
Create rule S6773: Hashicorp tokens should not be disclosed (#3077)
You can preview this rule
[here](https://sonarsource.github.io/rspec/#/rspec/S6773/secrets)
(updated a few minutes after each push).

## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)

---------

Co-authored-by: sebastien-andrivet-sonarsource <sebastien-andrivet-sonarsource@users.noreply.github.com>
Co-authored-by: sebastien-andrivet-sonarsource <sebastien.andrivet@sonarsource.com>
2023-09-15 14:31:33 +02:00
github-actions[bot]
06e4b6313d
Create rule S6758: NPM access tokens should not be disclosed (APPSEC-1064) (#3041)
You can preview this rule
[here](https://sonarsource.github.io/rspec/#/rspec/S6758/secrets)
(updated a few minutes after each push).

## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)

---------

Co-authored-by: egon-okerman-sonarsource <egon-okerman-sonarsource@users.noreply.github.com>
Co-authored-by: Egon Okerman <egon.okerman@sonarsource.com>
2023-09-15 14:20:15 +02:00
Alejandro Álvarez Ayllón
d22709e54f
Modify rule S905: Adapt for LaYC
Co-authored-by: Balázs Benics <108414871+balazs-benics-sonarsource@users.noreply.github.com>
2023-09-15 09:03:39 +00:00
SonarTech
cc61ca8dfa update coverage information 2023-09-15 00:32:48 +00:00
Loris S
8df177e2a1
Modify S6334: Make the description consistent and add sample (#3069)
## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)

---------

Co-authored-by: daniel-teuchert-sonarsource <141642369+daniel-teuchert-sonarsource@users.noreply.github.com>
2023-09-14 17:45:21 +02:00
Loris S
80179dd99b
Modify S6290(secrets): Validation (#3079)
## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)

---------

Co-authored-by: daniel-teuchert-sonarsource <141642369+daniel-teuchert-sonarsource@users.noreply.github.com>
2023-09-14 15:10:18 +00:00
Peter Trifanov
89c4343dd1
Modify rule S6581: Update message, rephrase wording for LaYC format (#3076) 2023-09-14 16:11:59 +02:00
Michael Jabbour
cc7bfe8518
Modify rule S5523: Correct spec and update metadata (#3054)
- Metadata is updated so that it is consistent with the metadata of the
new MISRA rule M23_321. See SonarSource/sonar-cpp#3006.
- Correct the spec since the implementation has been updated later so
that it raises only on built-in and pointer types. See
SonarSource/sonar-cpp#684.

## Review

A dedicated reviewer checked the rule description successfully for:

- [x] logical errors and incorrect information
- [x] information gaps and missing content
- [x] text style and tone
- [x] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)
2023-09-14 15:52:18 +02:00
github-actions[bot]
5ad8095d83
Create rule S6770: User-defined JSX components should use Pascal case (#3073) 2023-09-14 15:18:20 +02:00
Marco Borgeaud
915ef808a2
RULEAPI-788 Turn diff-view validation on (#2883) 2023-09-14 12:03:01 +02:00
Loris S
84d9a3c065
Modify S6338: Improve samples (#3072)
## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)
2023-09-14 11:50:10 +02:00
daniel-teuchert-sonarsource
c8a953286f
APPSEC-1083: S6382 Fixed incorrect ARM examples (#3056)
## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)

---------

Co-authored-by: Loris S. <91723853+loris-s-sonarsource@users.noreply.github.com>
2023-09-14 11:41:28 +02:00
github-actions[bot]
e61222637f
Create rule S6766: JSX special characters should be escaped (#3057)
https://github.com/SonarSource/SonarJS/issues/4139
2023-09-14 11:15:57 +02:00
Rudy Regazzoni
30036c6eb4
Modify rule S6388: Remove diff-id on compliant example without non-compliant equivalent (#3070)
## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)

[Related
issue](https://github.com/SonarSource/rspec/pull/1925#pullrequestreview-1624869461)
2023-09-14 09:56:56 +02:00
github-actions[bot]
e4e7d4738e
Create rule S6767: Unused React typed props should be removed (#3059) 2023-09-14 09:39:26 +02:00
SonarTech
70f705394d update coverage information 2023-09-14 00:33:59 +00:00
Egon Okerman
a9c9fb99ff
Modify rule S4423, S6378, S6387, S6656: Fix diff view errors in ARM examples (#3067)
## Review

A dedicated reviewer checked the rule description successfully for:

- [x] logical errors and incorrect information
- [x] information gaps and missing content
- [x] text style and tone
- [x] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)
2023-09-13 17:48:09 +02:00
Marco Borgeaud
3075880d75
Modify rule S127: fix diff-id and diff-type (#3035) 2023-09-13 16:44:16 +02:00
Marco Borgeaud
11a2f3acbd
Modify rule S2251: fix diff-id (#3036) 2023-09-13 16:39:32 +02:00
github-actions[bot]
a630b5dd26
Create rule S6759: React props should be read-only (#3043) 2023-09-13 15:58:40 +02:00
daniel-teuchert-sonarsource
9a888ec176
APPSEC-1082 Validate S6381 ARM (#3022)
## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)
2023-09-13 15:50:36 +02:00
daniel-teuchert-sonarsource
c02882ec9f
APPSEC-1082: S6381 Adjust code examples so that they can be scanned by Sonarqube (#3050)
This PR adjusts the JSON code examples and adds a name field that is
needed for the files to be recognized by sonar-iac-plugin.

## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)
2023-09-13 15:49:57 +02:00
daniel-teuchert-sonarsource
b22dae5811
APPSEC-1080: S6364 Adjust the retention period of the compliant examples (#3049)
This PR adjusts the retention period from the compliant examples so that
they do not raise security hotspots when scanned with the Sonarway
profile.

## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)
2023-09-13 15:49:15 +02:00
daniel-teuchert-sonarsource
9f5a87c298
Arm/make examples schema compliant (#3047)
This PR changes the JSON examples for ARM rules to make sure that the
code samples will be scanned by sonar-iac-plugin.
To ensure this all resources need a name field and the schema URL has to
be an https and not http URL.

## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)
2023-09-13 15:48:50 +02:00
daniel-teuchert-sonarsource
2b6572864d
APPSEC-1077: S6329 Improve examples fso that they can be scanned with sonar-iac (#3048)
This PR fixes the code examples for ARM for rule S6329 so that they can
be scanned with Sonarqube.
The schema URL for the JSON examples has to be https and for the bicep
examples, the correct quotes need to be used.

## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)
2023-09-13 15:48:25 +02:00
Rudy Regazzoni
d2c8e2fdad
Modify rule S6388: Add language AzureResourceManager (Bicep) (#1925)
Specification ticket:
https://sonarsource.atlassian.net/browse/SONARIAC-759
2023-09-13 15:29:57 +02:00
github-actions[bot]
bc5795a24c
Create rule S6761: children and dangerouslySetInnerHTML should not be used together (#3045)
https://github.com/SonarSource/SonarJS/issues/4136
2023-09-13 11:36:36 +02:00
Angelo
c4bf7e1391
Fix typo in S1774 rule.adoc and remove broken link in S6411 rule.adoc (#3053) 2023-09-13 10:28:37 +02:00
Egon Okerman
905365e865
Modify rule S6380: Add language AzureResourceManager (Bicep) (#2298) 2023-09-13 10:27:43 +02:00
Egon Okerman
17040a154f
Modify rule S6656: add language AzureResourceManager (Bicep) (#2356) 2023-09-13 10:27:13 +02:00
Egon Okerman
bc2c537f49
Modify rule S6378: Add language AzureResourceManager (Bicep) (#2255) 2023-09-13 10:26:31 +02:00
Egon Okerman
ebc3f49dd0
Modify rule S6364: Add language AzureResourceManager (Bicep) (#1913) 2023-09-13 10:25:38 +02:00
Egon Okerman
4c61cfe3b9
Modify rule S6387: Add language AzureResourceManager (Bicep) (#1907) 2023-09-13 10:25:18 +02:00
Egon Okerman
897bb45fbf
Modify rule S4423: Add language AzureResourceManager (Bicep) (#1879) 2023-09-13 10:25:04 +02:00
github-actions[bot]
9b3de2dd1f
Create rule S6763: "shouldComponentUpdate" should not be defined when extending "React.PureComponent" (#3051) 2023-09-13 09:28:25 +02:00
SonarTech
84d49d5c29 update coverage information 2023-09-13 00:32:47 +00:00
github-actions[bot]
320b22a2fb
Create rule S6757: this should not be used in functional components (#3040)
https://github.com/SonarSource/SonarJS/issues/4133
2023-09-12 16:36:10 +02:00
Marco Borgeaud
b7ad927009
Modify rule S6600: remove extra diff-view (#3039) 2023-09-12 15:21:04 +02:00
Marco Borgeaud
367e056eaf
Modify rule S2004: remove extra diff-view (#3038) 2023-09-12 15:20:48 +02:00
Marco Borgeaud
65e74c0a9e
Modify rule S1599: remove extra diff-view (#3037) 2023-09-12 15:20:32 +02:00
Marco Borgeaud
7f98f4246c
RULEAPI-788 Allow multiple compliant solutions (#3034)
See https://discuss.sonarsource.com/t/layc-diff-view-validation/15392/7
2023-09-12 13:16:52 +02:00