4113 Commits

Author SHA1 Message Date
github-actions[bot]
c5593190ce
Create rule S5344(python): Passwords should not be stored in plain-text or with a fast hashing algorithm (#3715) 2024-03-18 17:37:51 +01:00
github-actions[bot]
576a6152e0
Create rule S6377: XML signature should be verified securely (Python) (APPSEC-1588) (#3763) 2024-03-18 17:11:22 +01:00
Loghin Vlad-Andrei
260d4830b0
Modify rule S5566: Cover std::ranges::contains (CPP-5058)
* Edit specification to account for C++23 std::*::contains

* Addressed PR review

* Links to cppreference

* Apply suggestions from code review

Co-authored-by: Marco Borgeaud <89914223+marco-antognini-sonarsource@users.noreply.github.com>

---------

Co-authored-by: Marco Borgeaud <89914223+marco-antognini-sonarsource@users.noreply.github.com>
2024-03-18 17:50:43 +02:00
github-actions[bot]
afffac2329
Create rule S6947: Jobs should not have too many steps (#3757)
* Create rule S6947

* Add rule description

* Extend scope to procedure

* Hide implementation detail

---------

Co-authored-by: rudy-regazzoni-sonarsource <rudy-regazzoni-sonarsource@users.noreply.github.com>
Co-authored-by: Rudy Regazzoni <110470341+rudy-regazzoni-sonarsource@users.noreply.github.com>
2024-03-18 14:48:27 +01:00
Nils Werner
3dbbac4652
Modify rule S103: Remove from default profile for PHP (#3776) 2024-03-18 11:53:59 +01:00
gaetan-ferry-sonarsource
b39f6f5790
Modify rule S2053: Add better code examples and more how to fix sections (#3704) 2024-03-18 09:32:06 +01:00
SonarTech
f795d7d9d9 update coverage information 2024-03-16 00:33:06 +00:00
Jamie Anderson
23afb17784
Modify rule S5542: Change text for rule update (#3719) 2024-03-15 15:49:46 +00:00
Costin Zaharia
11db2b6549
Modify rule S3416: remove from SonarWay (#3774) 2024-03-15 16:17:40 +01:00
github-actions[bot]
fb584ec82a
Create rule S6918: "tf.Variable" objects should be singletons when created inside of a "tf.function" (#3619) 2024-03-15 16:06:59 +01:00
kevin.hinz
7bb601b5d7
Modify rule S2551: clarify example used in the description (#3713)
* Modify rule S2551: clarify example in description

* Modify rule S2551: improve word choice
2024-03-15 14:40:37 +01:00
kevin.hinz
fc68332d73
Modify rule S3927: Update rule description (#3712)
* Modify rule S3927: Update rule description

Changes suggested by the Docs Squad:
- use full word in place of short-hand text

* Update rule S3927: improve word choice

Co-authored-by: Tim Pohlmann <tim.pohlmann@sonarsource.com>

---------

Co-authored-by: Tim Pohlmann <tim.pohlmann@sonarsource.com>
2024-03-15 14:38:53 +01:00
Fred Tingaud
294be1e6df
Frontend: Display an icon next to the title if a rule has no default quality profile 2024-03-15 12:36:48 +01:00
Costin Zaharia
fbe0e1b7ff
C# Logging rules: add impact and attribute (#3766) 2024-03-15 11:52:16 +01:00
SonarTech
4fba47bc78 update coverage information 2024-03-15 00:33:07 +00:00
github-actions[bot]
e71053d356
Create rule S6675: Trace.WriteLineIf should not be used with TraceSwitch levels (#2575) 2024-03-14 17:56:25 +01:00
github-actions[bot]
5ca970e1ac
Create rule S6673: Log message template placeholders should be in the right order (#2563) 2024-03-14 17:45:06 +01:00
github-actions[bot]
fcafb3e6f0
Create rule S6670: Trace.Write and Trace.WriteLine should not be used (#2538) 2024-03-14 17:44:12 +01:00
github-actions[bot]
460fc9c64c
Create rule S6664: too many logging calls within a code block (#2494) 2024-03-14 15:53:27 +00:00
Irina Batinic
e858b2b862
Modify rule S6916: Update description to remove if case, because it is excluded from the implementation (#3758) 2024-03-14 14:41:39 +01:00
Antonio Aversa
951c7da4b7
Modify rule S3416: add C# and VB.NET (#2528)
* Modify rule S3416: add C# and VB.NET

* Add logging frameworks to the list of allowed frameworks

* Reverse adding logging frameworks

* Fix issues from adoc validation

* Review 1

* Fix tabbing

* Review 2

* Add list of supported frameworks

* Missed renames

* Add 'logging' tag

* Remove VB.NET

* Fix a minor typo

---------

Co-authored-by: Gregory Paidis <gregory.paidis@sonarsource.com>
Co-authored-by: Gregory Paidis <115458417+gregory-paidis-sonarsource@users.noreply.github.com>
2024-03-14 14:22:26 +01:00
guillem-bartina-sonarsource
3c1d615467
Modify rules S1871 and S3923: Update description in accordance with the new understanding (#3752)
* Update description of S3923

* Remove exception to the exception of S1871

* Fix typo

* Wording

* Wording

* Wording

* Resolve comments

* Resolve comments 2
2024-03-14 13:42:02 +01:00
leonardo-pilastri-sonarsource
0cbad92698
Modify rule S6878: Remove one exception (#3760) 2024-03-14 11:53:55 +01:00
github-actions[bot]
467a918de6
Create rule S6930: Backslash should be avoided in route templates (#3662) example 2024-03-14 10:55:39 +01:00
github-actions[bot]
122087850e
Create rule S6936: Names of C standard library macros and functions should not be used as identifiers (split from S978) | Modify rule S978: remove parts covered by new rule (#3706)
* Create rule S6936

* first draft

* Wording

* modify old rule

* Fixes new rule

* Add related to new rule

* Refine examples and error message

* First batch of fixes

* Fix noncompliant example

* Remove MISRA C 2004 references + LaYC format

* Fixes

---------

Co-authored-by: guillem-bartina-sonarsource <guillem-bartina-sonarsource@users.noreply.github.com>
Co-authored-by: guillem-bartina-sonarsource <guillem.bartrina@sonarsource.com>
2024-03-14 10:46:09 +01:00
SonarTech
2b04a60e0e update coverage information 2024-03-14 00:33:00 +00:00
github-actions[bot]
efc6728641
Create rule S6938: Jobs number of steps should be below the hard limit of 255 (#3730)
* Create rule S6938

* Add rule description

* Only display Implementation spec on GitHub

* Update rules/S6938/jcl/rule.adoc

Co-authored-by: Rudy Regazzoni <110470341+rudy-regazzoni-sonarsource@users.noreply.github.com>

* Change to bug version and remove parameter

* Changing rule title

* Address review comments

* fix impact

---------

Co-authored-by: sallaigy <sallaigy@users.noreply.github.com>
Co-authored-by: Gyula Sallai <gyula.sallai@sonarsource.com>
Co-authored-by: Rudy Regazzoni <110470341+rudy-regazzoni-sonarsource@users.noreply.github.com>
2024-03-13 15:59:46 +01:00
github-actions[bot]
a1eebc5d98
Create rule S6940: Positional parameters must precede keyword parameters (#3738)
* Create rule S6940

* Put jcl spec

* Address review comment

---------

Co-authored-by: rudy-regazzoni-sonarsource <rudy-regazzoni-sonarsource@users.noreply.github.com>
Co-authored-by: Rudy Regazzoni <110470341+rudy-regazzoni-sonarsource@users.noreply.github.com>
2024-03-13 15:18:06 +01:00
Loris S
c8fc3ffe00
Modify S3649(js): Fix code samples (#3759) 2024-03-13 13:06:25 +00:00
github-actions[bot]
a1a88a27d0
Create rule S6939: DD DATA should be delimited (#3734)
* Create rule S6939

* Add rule description

* Update rules/S6939/jcl/rule.adoc

Co-authored-by: Rudy Regazzoni <110470341+rudy-regazzoni-sonarsource@users.noreply.github.com>

---------

Co-authored-by: sallaigy <sallaigy@users.noreply.github.com>
Co-authored-by: Gyula Sallai <gyula.sallai@sonarsource.com>
Co-authored-by: Rudy Regazzoni <110470341+rudy-regazzoni-sonarsource@users.noreply.github.com>
2024-03-13 11:06:53 +01:00
github-actions[bot]
a2241c39a3
Modify rule S100: add language JCL (#3723)
* Add jcl to rule S100

* Provide JCL details

* Address review comment

---------

Co-authored-by: rudy-regazzoni-sonarsource <rudy-regazzoni-sonarsource@users.noreply.github.com>
Co-authored-by: Rudy Regazzoni <110470341+rudy-regazzoni-sonarsource@users.noreply.github.com>
2024-03-12 14:53:36 +01:00
Vincenzo Pellegrini
150702c311
Modify rule S1764: Add CFamily exception for left shift operator (#3680)
Related to CPP-4234.
2024-03-12 14:49:53 +01:00
github-actions[bot]
68e9c93d57
Create rule S1312: Add C# and VB.NET (#2488)
* Add csharp to rule S1312

* First specification

* Fix ascii

* Improve description

* Address comments

* Add the list of supported frameworks

* Add links to supported frameworks

* Small fixes

* Add missing closing brace

* Add tag logging

* Remove VB.NET

* Fix code snippets

---------

Co-authored-by: cristian-ambrosini-sonarsource <cristian-ambrosini-sonarsource@users.noreply.github.com>
Co-authored-by: Cristian Ambrosini <cristian.ambrosini@sonarsource.com>
Co-authored-by: Gregory Paidis <gregory.paidis@sonarsource.com>
Co-authored-by: Gregory Paidis <115458417+gregory-paidis-sonarsource@users.noreply.github.com>
2024-03-12 13:59:26 +01:00
Marco Borgeaud
7d29a87523
Delete rule S802 (CPP-1002) 2024-03-12 12:07:34 +01:00
github-actions[bot]
4bb4693dda
Modify rule S1544: add language JCL (#3725)
* Add jcl to rule S1544

* feed jcl details

* fix parameter

* Address review comment

---------

Co-authored-by: rudy-regazzoni-sonarsource <rudy-regazzoni-sonarsource@users.noreply.github.com>
Co-authored-by: Rudy Regazzoni <110470341+rudy-regazzoni-sonarsource@users.noreply.github.com>
2024-03-12 11:03:58 +01:00
Johann Beleites
9e9a1a2ea5
Modify rule S6218: Correct typo (#3755) 2024-03-12 10:38:02 +01:00
SonarTech
17211b4e3d update coverage information 2024-03-12 00:32:42 +00:00
github-actions[bot]
cf7dd4781a
Create rule S6942: Procedures should not contain in-stream data (#3741)
* Create rule S6942

* Add rule description

---------

Co-authored-by: sallaigy <sallaigy@users.noreply.github.com>
Co-authored-by: Gyula Sallai <gyula.sallai@sonarsource.com>
2024-03-11 16:52:56 +01:00
Angelo Buono
47a517fc47
Modify rule S3457 with example using single quote (#3753) 2024-03-11 16:34:45 +01:00
github-actions[bot]
25e2d4c040
Create rule S6883 (#3569)
* Create rule S6883

* Specify rule

* CR fixes

---------

Co-authored-by: maksim-grebeniuk-sonarsource <maksim-grebeniuk-sonarsource@users.noreply.github.com>
Co-authored-by: Maksim Grebeniuk <maksim.grebeniuk@sonarsource.com>
Co-authored-by: Ghislain Piot <ghislain.piot@sonarsource.com>
2024-03-11 13:48:49 +01:00
github-actions[bot]
7330c5cad1
Create rule S6900 (#3591)
* Create rule S6900

* Specify rule

* CR fixes

* CR fixes

---------

Co-authored-by: maksim-grebeniuk-sonarsource <maksim-grebeniuk-sonarsource@users.noreply.github.com>
Co-authored-by: Maksim Grebeniuk <maksim.grebeniuk@sonarsource.com>
2024-03-11 13:41:36 +01:00
github-actions[bot]
33572f316c
Create rule S6882 (#3567)
* Create rule S6882

* Specify rule

* CR fixes

* CR fixes

* Remove extra comments

---------

Co-authored-by: maksim-grebeniuk-sonarsource <maksim-grebeniuk-sonarsource@users.noreply.github.com>
Co-authored-by: Maksim Grebeniuk <maksim.grebeniuk@sonarsource.com>
Co-authored-by: Ghislain Piot <ghislain.piot@sonarsource.com>
2024-03-11 13:26:40 +01:00
github-actions[bot]
fd4abe522e
Create rule S6890: zoneinfo should be preferred to pytz when using Python 3.9 and later (#3578)
* Create rule S6890: zoneinfo should be preferred to pytz when using Python 3.9 and later

* Fix after review

* Fix after review

---------

Co-authored-by: guillaume-dequenne-sonarsource <guillaume-dequenne-sonarsource@users.noreply.github.com>
Co-authored-by: David Kunzmann <david.kunzmann@sonarsource.com>
Co-authored-by: Guillaume Dequenne <guillaume.dequenne@sonarsource.com>
2024-03-11 11:57:19 +01:00
github-actions[bot]
6cef4fd8ca
Create rule S6903: Using timezone-aware "datetime" objects should be preferred over using "datetime.datetime.utcnow" and "datetime.datetime.utcfromtimestamp" (#3597)
* Create rule S6903

* Create rule S6903: Using timezone aware "datetime"s should be preferred over using "datetime.datetime.utcnow" and "datetime.datetime.utcfromtimestamp"

* Fix after review

* Minor updates

---------

Co-authored-by: joke1196 <joke1196@users.noreply.github.com>
Co-authored-by: David Kunzmann <david.kunzmann@sonarsource.com>
Co-authored-by: Guillaume Dequenne <guillaume.dequenne@sonarsource.com>
2024-03-11 11:53:04 +01:00
github-actions[bot]
acd7bf42a5
Create rule S6887: pytz.timezone should not be passed to the datetime.datetime constructor (#3573) 2024-03-11 11:15:08 +01:00
SonarTech
1ea0026393 update coverage information 2024-03-09 00:32:38 +00:00
github-actions[bot]
334e99d17a
Create rule S2139: Add C# (#2465) 2024-03-08 17:24:42 +01:00
Arseniy Zaostrovnykh
710031d3d8
Use the new channel name in update_coverage.yml 2024-03-08 16:39:14 +01:00
github-actions[bot]
df644a9db1
Create rule S6669: Logger field names should comply with a naming convention (#2533)
* Create rule S6669

* First specification

* Add backticks

* Add compliant and noncompliant comments

* Add properties

* Use standard RSPEC format for links

* Change the scope to "Main"

* Fix default format regex

* Remove VB.NET

* Add logging tag

* Fix asciidoc issues

---------

Co-authored-by: cristian-ambrosini-sonarsource <cristian-ambrosini-sonarsource@users.noreply.github.com>
Co-authored-by: Cristian Ambrosini <cristian.ambrosini@sonarsource.com>
Co-authored-by: Gregory Paidis <gregory.paidis@sonarsource.com>
Co-authored-by: Gregory Paidis <115458417+gregory-paidis-sonarsource@users.noreply.github.com>
2024-03-08 16:01:23 +01:00
github-actions[bot]
1ae135be36
Create rule S6672: Generic logger injection should match enclosing type (#2546)
* Create rule S6672

* Fix inclusion

* Fix rspecator inclusion

* Code review 1

* Add logger tag

* Remove VB.NET

---------

Co-authored-by: antonioaversa <antonioaversa@users.noreply.github.com>
Co-authored-by: Antonio Aversa <antonio.aversa@sonarsource.com>
Co-authored-by: Gregory Paidis <gregory.paidis@sonarsource.com>
Co-authored-by: Gregory Paidis <115458417+gregory-paidis-sonarsource@users.noreply.github.com>
2024-03-08 15:56:46 +01:00