3168 Commits

Author SHA1 Message Date
Maksim Grebeniuk
fc65f77aaf
Modify rule S5633: LaYC format (#2758) 2023-08-04 16:39:20 +02:00
Guillaume Dequenne
eaeb688782
Modify S5855: LaYC format (#2763) 2023-08-04 16:18:23 +02:00
David Kunzmann
7ed93874de
Modify rule S5799: LaYC format (#2627) 2023-08-04 16:15:13 +02:00
Maksim Grebeniuk
7dbca266e5
Modify rule S2638: LaYC format (#2782) 2023-08-04 16:14:12 +02:00
Guillaume Dequenne
f174ab003a
Modify S6002: LaYC format (#2771) 2023-08-04 16:12:40 +02:00
tomasz-kaminski-sonarsource
dfe3824ab3
Modify rule S5283: Adapt to LaYC 2023-08-04 15:46:42 +02:00
Maksim Grebeniuk
f3bcb12833
Modify rule S1542: LaYC format (#2667) 2023-08-04 15:35:18 +02:00
Maksim Grebeniuk
62830872f3
Modify rule S3985: LaYC format (#2780) 2023-08-04 15:34:27 +02:00
Arseniy Zaostrovnykh
3d75b1285e
Modify rule S3584: Expand to cover LaYC 2023-08-04 13:31:50 +00:00
Marcin Stachniuk
4cfc0247d3
SONARIAC-761 Rule S6383 Disable RBAC on AKS ad Bicept (#2745)
## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)
2023-08-04 13:55:06 +02:00
Philipp Dominik Schubert
f2920fa60d
Modify rule S5485: Expand and adjust for LaYC (#2779)
## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)
2023-08-04 13:54:42 +02:00
Loghin Vlad-Andrei
330fde5308
Modify rule S6214: Convert to LaYC format
## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)

Co-authored-by: Arseniy Zaostrovnykh <arseniy.zaostrovnykh@sonarsource.com>
2023-08-04 11:53:34 +00:00
Nils Werner
0c5c8c9ca7
Modify rule S6295: LaYC format (#2785) 2023-08-04 13:33:41 +02:00
github-actions[bot]
1c73733e2e
Modify rule S1135: Add language AzureResourceManager (Bicep) (#2788) 2023-08-04 13:28:28 +02:00
Maksim Grebeniuk
e92fcdc57f
Modify rule S6465: LaYC format (#2708) 2023-08-04 13:21:13 +02:00
Maksim Grebeniuk
43ff047f88
Modify rule S3699: LaYC format (#2759) 2023-08-04 12:58:46 +02:00
David Kunzmann
041ffd78e4
Modify rule S6464: LaYC format (#2707) 2023-08-04 12:57:58 +02:00
Balázs Benics
9969140048
Modify rule S5486: Adapt to LaYC (#2751) 2023-08-04 10:26:08 +00:00
Martin Strecker
f0f54b8f7a
Modify rule S100: Revert accidental change (#2789)
Revert an accidental change introduced in #2713.
2023-08-04 11:54:05 +02:00
Philipp Dominik Schubert
8dba3caae0
Modify rule S5272: Expand and adjust for LaYC (#2752)
## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)

---------

Co-authored-by: Arseniy Zaostrovnykh <arseniy.zaostrovnykh@sonarsource.com>
2023-08-04 09:40:34 +00:00
Marco Borgeaud
c8cb1f6fb0
Modify rule S1048,S3654: LaYC format 2023-08-04 09:38:26 +02:00
Pierre-Loup
149a133550
Modify rule S3749: update issue type to Code-Smell (APPSEC-523) (#2485) 2023-08-04 09:26:25 +02:00
Rudy Regazzoni
d5a38ab485
Modify rule S6381: Add language AzureResourceManager (Bicep) (#1922) 2023-08-04 08:53:48 +02:00
tomasz-kaminski-sonarsource
dac53897f5
S3870 Update metadata (#2786)
Few updates I have missed during review, and just realized when saw
sonar-cpp PR:
* we should check quickfix, and mark if infeasible if we think that one
could be provided
 * metadata now contains links to security standards, so I updated it
* pre
https://github.com/SonarSource/rspec/blob/master/docs/link_formatting.adoc,
CWE should start with CWE
* I think that CWE and CERT are put under standard, external conding
guidelines are use for MISRA and CoreGuidlines.

## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)

Co-authored-by: Tomasz Kamiński <tomasz.kamiński@sonarsource.com>
2023-08-04 07:58:49 +02:00
SonarTech
3f93d28a53 update coverage information 2023-08-04 00:34:58 +00:00
Marco Kaufmann
3d1f6649f4
SONARJAVA-4552 Deprecate rule S6374 (#2783) 2023-08-03 17:55:52 +02:00
Marco Borgeaud
6398acacd9
Add CI task to test CI tests (#2768)
Extract the bits using the custom asciidoctor to a dedicated file.
This new script uses `set -e` to catch unexpected errors.
It is also covered with integration tests that get executed on the CI.

This serves as the groundwork to integrate more advanced validation
tests.
2023-08-03 17:21:40 +02:00
Anton Haubner
f6dfcca980
Modify rule S2734: Python: Don't replace with S935 (#2774)
S935 has been merged with S6658.
As part of that merge, S935 has been restricted to a specific set of
special functions for now, not including `__init__`.

Hence, we keep S2734 at the moment, until S935 is extended to cover more
functions.

See also
* https://github.com/SonarSource/sonar-python/pull/1529#discussion_r1282759218
* https://github.com/SonarSource/sonar-python/pull/1528
* https://sonarsource.slack.com/archives/CFUS31LRE/p1690534750237959
2023-08-03 17:09:14 +02:00
Jamie Anderson
5c10d8b93c
Modify rule S6382: Add language AzureResourceManager (Bicep) (#1921)
Specification ticket:
https://sonarsource.atlassian.net/browse/SONARIAC-762
Implementation ticket: TBC

This PR builds on top of #1920 to add examples using the Bicep language.

---------

Co-authored-by: Rudy Regazzoni <110470341+rudy-regazzoni-sonarsource@users.noreply.github.com>
2023-08-03 16:52:32 +02:00
tomasz-kaminski-sonarsource
da1e6f4fc5
S3519: Add notes for migration to LaYC
Adding very useful LaYC migration notes from Balazs.
2023-08-03 16:51:44 +02:00
Philipp Dominik Schubert
d45bde0019
Modify rule S3807: Expand and adjust for LaYC (#2750)
## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)
2023-08-03 16:26:31 +02:00
tomasz-kaminski-sonarsource
c5cf32fc30
Modify rule S3529: Adapt to LaYC 2023-08-03 14:20:30 +00:00
github-actions[bot]
7fe7e1eda0
Create rule S4790: Using weak hashing algorithms is security-sensitive: add Go (#2753)
You can preview this rule
[here](https://sonarsource.github.io/rspec/#/rspec/S4790/go) (updated a
few minutes after each push).

## Review

A dedicated reviewer checked the rule description successfully for:

- [x] logical errors and incorrect information
- [x] information gaps and missing content
- [x] text style and tone
- [x] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)
2023-08-03 16:06:34 +02:00
Nils Werner
acb068e9de
Modify rule S6476: LaYC format (#2777) 2023-08-03 14:04:17 +00:00
Martin Strecker
49bcb7ce8a
Modify rule S3925: Adopt exception description to the new behavior (#2713)
Add the new behavior to the RSpec introduced by
https://github.com/SonarSource/sonar-dotnet/pull/7673

## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)
2023-08-03 15:41:46 +02:00
Anton Haubner
5dc6e2c8c9
Modify rule S1128: Python: Remove rule from Sonar way (#2773) 2023-08-03 13:55:22 +02:00
Anton Haubner
286ec65543
Modify rule S6661: Python: Remove from Sonar Way (#2772) 2023-08-03 13:54:45 +02:00
David Kunzmann
df23b9bec7
Modify Rule S5795: LaYC Format (#2648) 2023-08-03 13:46:37 +02:00
Nils Werner
56f4517906
Modify rule S1135: LaYC format (#2715) 2023-08-03 10:58:53 +00:00
Irina Batinic
8d41165dad
Modify rule S2039: SONARJAVA-4467 Add note for exceptions (#2766) 2023-08-03 09:30:22 +00:00
Marco Borgeaud
e565837487
Modify rule S1913: LaYC format (#2747) 2023-08-03 09:18:37 +00:00
Jamie Anderson
69b3569c65
Modify rule S6329: Add language AzureResourceManager (Bicep) (#1889)
Research ticket: https://sonarsource.atlassian.net/browse/SONARIAC-754
Implementation ticket:
https://sonarsource.atlassian.net/browse/SONARIAC-790

PR #1872 Added support for AzureResourceManager (JSON). This PR extends
that work to add Bicep support. This PR cannot be merged until we
support the Bicep language.
2023-08-03 11:02:22 +02:00
Maksim Grebeniuk
805c41c2bb
Modify rule S5704: LaYC format (#2640) 2023-08-03 11:01:28 +02:00
Guillaume Dequenne
6bdec50957
Modify S5886: LaYC format (#2625) 2023-08-03 10:58:37 +02:00
hendrik-buchwald-sonarsource
b626a82de9
Create rule S5332: Add BICEP for AzureResourceManager (#1872)
PR #1839 added the JSON format for Azure Resource Manager. This PR adds
BICEP. Since BICEP support will follow later, it can not be merged yet.

---------

Co-authored-by: Rudy Regazzoni <110470341+rudy-regazzoni-sonarsource@users.noreply.github.com>
2023-08-03 10:26:18 +02:00
David Kunzmann
9b7a715203
Modify rule S5781: LaYC format (#2615) 2023-08-03 09:54:15 +02:00
Guillaume Dequenne
d5bc6aa709
Modify S5727: LaYC format (#2616) 2023-08-03 09:44:48 +02:00
Amélie Renard
1e063872a9
Modify rule S3935: LaYC format 2023-08-03 09:11:13 +02:00
Martin Strecker
d84dc21774
Add VS code schema support for manifest.json (#2767)
Adds json schema support for VS Code (especially [IntelliSense and
validation](https://code.visualstudio.com/docs/languages/json#_intellisense-and-validation)):


![image](https://github.com/SonarSource/rspec/assets/103252490/45145852-08d2-4bf3-af82-7f176afb29c6)
2023-08-03 09:02:47 +02:00
Marcin Stachniuk
8dbe0e2ed2
Modify rule S6413: Defining a short log retention duration is security-sensitive, add Bicep format (#2743)
## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)
2023-08-03 08:42:07 +02:00