Commit Graph

  • de3124561f
    Create rule S5659: JWT should be signed and verified with strong cipher algorithms for Go (#4668) github-actions[bot] 2025-02-25 16:42:12 +01:00
  • a33a6bbd7c Modify rule S6945: Upgrade severity and impact to Critical and HIGH ah/jcl-updates-helper-branch Anton Haubner 2025-02-25 11:24:54 +01:00
  • 8bc9204b58 Modify rule S6945: Add MAINTAINABILITY quality. Anton Haubner 2025-02-25 11:10:45 +01:00
  • b950e447ae Modify rule S6977: Change type to BUG Anton Haubner 2025-02-25 10:43:58 +01:00
  • adb28dda50
    Merge branch 'master' into ft/moreupdate ft/moreupdate Fred Tingaud 2025-02-25 10:07:46 +01:00
  • 5e6349e3a1
    Modify S6660: Fix impacts and default severity (#4703) David Kunzmann 2025-02-24 16:40:43 +01:00
  • 8ef95b6d9d Create rule S7205 hendrik-buchwald-sonarsource 2025-02-24 12:27:22 +00:00
  • bab40990e8 Increment RSPEC ID counter hendrik-buchwald-sonarsource 2025-02-24 12:27:18 +00:00
  • 410a9972af update coverage information SonarTech 2025-02-23 02:43:30 +00:00
  • f16efb2b5c RULEAPI-834 Update remaining rules where defaultSeverity is different from MQR Fred Tingaud 2025-02-21 17:00:48 +01:00
  • 753b21a566 RULEAPI-834 Update remaining rules where defaultSeverity is different from MQR Fred Tingaud 2025-02-21 16:02:29 +01:00
  • d8c3c03e56 RULEAPI-832 Fix missing automatically updatable rules Fred Tingaud 2025-02-21 15:16:29 +01:00
  • 656f853238
    RULEAPI-834 Update rules where defaultSeverity is different from MQR (#4686) Nils Werner 2025-02-21 15:28:32 +01:00
  • 77e9a06d42 Increment RSPEC ID counter egon-okerman-sonarsource 2025-02-21 13:56:07 +00:00
  • b307db797b CPP-6157 Fix discrepancies between MQR and severity for CFamily rules - more Fred Tingaud 2025-02-21 14:07:08 +01:00
  • 59fba4deac
    Create rule S5445: Insecure temporary file creation methods should not be used (#4671) github-actions[bot] 2025-02-21 12:02:48 +01:00
  • 3ce5e15f1f Increment RSPEC ID counter pierre-loup-tristant-sonarsource 2025-02-21 08:33:47 +00:00
  • 972b0e39c2 Automatically migrate all rules where defaultSeverity is Blocker and MQR is High Fred Tingaud 2025-02-13 18:38:11 +01:00
  • d2f3b560ab Create rule S7202 rule/add-RSPEC-S7202 yassin-kammoun-sonarsource 2025-02-20 14:22:45 +00:00
  • ebf132b53a Increment RSPEC ID counter yassin-kammoun-sonarsource 2025-02-20 14:22:41 +00:00
  • 4f6dc71c15 Increment RSPEC ID counter hendrik-buchwald-sonarsource 2025-02-20 14:18:11 +00:00
  • bfc745e0c9 Increment RSPEC ID counter yassin-kammoun-sonarsource 2025-02-20 12:57:17 +00:00
  • b44ed7cc7f Fix tests and severity display ft/removeDefaultSeverity Fred Tingaud 2025-02-20 12:04:31 +01:00
  • ea1ac05c78
    RULEAPI-833 Add a new langage identifier for Rust (#4675) Yassin Kammoun 2025-02-20 11:45:47 +01:00
  • 8b2c8602e6 Increment RSPEC ID counter teemu-rytilahti-sonarsource 2025-02-20 10:31:22 +00:00
  • ba18ae7f08
    Create rule S7187: PySpark Pandas DataFrame columns should not use a reserved name (#4622) github-actions[bot] 2025-02-20 11:22:12 +01:00
  • f26dc7084d
    Create rule S7196: Complex logic provided to PySpark withColumn method should be refactored into a separate expression (#4642) github-actions[bot] 2025-02-20 11:21:29 +01:00
  • 9d7de6d39d
    Create rule S7182: The subset argument should be provided when using PySpark DataFrame dropDuplicates (#4615) github-actions[bot] 2025-02-20 11:20:42 +01:00
  • fdf295d151 Update rules/S7119/cfamily/metadata.json Fred Tingaud 2025-02-19 15:01:17 +01:00
  • f78837a2bc Also add S6620 Fred Tingaud 2025-02-19 14:28:05 +01:00
  • c4ad5da103 Fix two more rules Fred Tingaud 2025-02-19 14:16:10 +01:00
  • 97ea439a11 Increase severity of S7127 Fred Tingaud 2025-02-19 09:57:10 +01:00
  • adae29df8e Fix discrepencies between MQR and severity for CFamily rules Fred Tingaud 2025-02-18 17:58:32 +01:00
  • 60cddc7cc9 update coverage information SonarTech 2025-02-20 02:42:22 +00:00
  • a27c13bb58 Change frontend to use code impacts for severity Fred Tingaud 2025-02-19 18:34:26 +01:00
  • dc3f77f960 Remove defaultSeverity from the schema Fred Tingaud 2025-02-19 17:46:14 +01:00
  • f24fac562f Remove defaultSeverity from all json files Fred Tingaud 2025-02-19 16:41:49 +01:00
  • ae4e0661ea
    Create rule S7191: PySpark "withColumns" should be preferred over "withColumn" when multiple columns are specified (#4633) github-actions[bot] 2025-02-19 17:06:04 +00:00
  • e769e586c9
    Update security rules: add OWASP Mobile Top 10 2024 security standard (APPSEC-2383) (#4660) Pierre-Loup 2025-02-19 17:19:00 +01:00
  • e6e83b2acb Fix discrepencies between MQR and severity for CFamily rules Fred Tingaud 2025-02-18 17:58:32 +01:00
  • 33f087f22b Increment RSPEC ID counter erwan-serandour 2025-02-19 13:23:56 +00:00
  • c046fc94c4
    Create rule S7195: PySpark lit(None) should be used when populating empty columns (#4638) github-actions[bot] 2025-02-19 10:58:21 +00:00
  • 9966f12d52 update coverage information SonarTech 2025-02-19 02:41:59 +00:00
  • 13111e20e7
    SONARPY-2489 Create rule S7189 PySpark DataFrames used multiple times should be cached or persisted (#4627) github-actions[bot] 2025-02-18 09:28:22 +01:00
  • 3049db59e8 update coverage information SonarTech 2025-02-18 02:41:07 +00:00
  • e2133270e7
    Create rule S6437: Credentials should not be hard-coded (#4641) github-actions[bot] 2025-02-17 15:53:59 +01:00
  • a2320f1b8d
    Create rule S4830: Server certificates should be verified during SSL/TLS connections (#4662) github-actions[bot] 2025-02-17 15:53:21 +01:00
  • d22236c056 Modify S7190: change tags to target tests leonardo-pilastri-sonarsource 2025-02-17 09:47:55 +01:00
  • 818f168bf5
    Delete rules/S5742/javascript/metadata.json (#4667) zglicz 2025-02-17 10:43:29 +01:00
  • 601aff6915
    S6418/php: fix typo in variable name (#4665) teemu-rytilahti-sonarsource 2025-02-17 09:52:55 +01:00
  • 29db082484
    Create rule S6418: Hard-coded secrets are security-sensitive (#4661) github-actions[bot] 2025-02-17 09:24:39 +01:00
  • 00213b7c50 update coverage information SonarTech 2025-02-15 02:40:26 +00:00
  • 4a2fe22a72 Fix Secrets template rule Fred Tingaud 2025-02-14 15:15:35 +01:00
  • 7475e42c29
    Create rule S7192: The "how" parameter should be specified when joining two PySpark DataFrames (#4634) github-actions[bot] 2025-02-13 17:25:01 +01:00
  • a16475c830
    SONARPY-2501 Create rule S7181 PySpark Window functions should always specify a frame (#4614) github-actions[bot] 2025-02-13 15:27:23 +01:00
  • e3a3a43170
    Create rule S4426: Cryptographic keys should be robust (#4659) github-actions[bot] 2025-02-13 14:25:30 +01:00
  • 2619fbcace
    Create rule S5527: Server hostnames should be verified during SSL/TLS connections for go (#4656) github-actions[bot] 2025-02-12 18:31:46 +01:00
  • 4903879d09
    Create rule S5344: Passwords should not be stored in plaintext or with a fast hashing algorithm (#4655) github-actions[bot] 2025-02-12 10:44:28 +01:00
  • c79083491d
    Create rule S3329: Cipher Block Chaining IVs should be unpredictable (#4658) github-actions[bot] 2025-02-12 10:19:39 +01:00
  • 162d5baaf8
    Create rule S5547: Cipher algorithms should be robust (#4652) github-actions[bot] 2025-02-10 13:30:29 +01:00
  • 19b9e223e1
    Deprecate rule S1227 (CPP-6131 and NET-1116) Loïc Joly 2025-02-10 12:16:09 +01:00
  • 6ef35e2a8c
    S3385: Remove Exit For, Do, While and Try (#4654) Pavel Mikula 2025-02-10 08:39:26 +01:00
  • d9e29030ae
    Create rule S2053: Password hashing functions should use an unpredictable salt (#4648) github-actions[bot] 2025-02-06 13:14:34 +01:00
  • 1f6167eb91
    Create rule S7197: Circular file imports should be resolved (#4645) github-actions[bot] 2025-02-06 13:10:59 +01:00
  • d9a7e045e9
    Create rule S7134: Architectural constraints should not be violated (JavaScript) (#4646) github-actions[bot] 2025-02-06 08:29:54 +00:00
  • 36d247fb3b
    SONARJAVA-5322 Modify rule S7177: add tests to tags (#4651) erwan-serandour 2025-02-05 15:38:28 +01:00
  • c5efdf6797
    SONARPY-2586 Point coverage script to the enterprise sonar-python repository (#4649) Ghislain Piot 2025-02-05 13:14:22 +00:00
  • 5be0d9daa7
    Adjust language label for go (#4650) daniel-teuchert-sonarsource 2025-02-05 11:56:49 +01:00
  • 1a4f63cc4d
    Modify S7179: change scope from Tests to Main (#4647) leonardo-pilastri-sonarsource 2025-02-03 16:48:01 +01:00
  • 071e229c14
    Modify rule S4507: Add support for Flask-GraphQL (#3428) daniel-teuchert-sonarsource 2025-02-03 12:08:40 +01:00
  • fc7ed69d88
    Add support for aiohttp (#3409) daniel-teuchert-sonarsource 2025-02-03 12:04:32 +01:00
  • c1a6b0f5f5
    Modify rule S4036: Fix Code Example (#4640) daniel-teuchert-sonarsource 2025-02-03 11:57:51 +01:00
  • c99ad72c75
    Create go rule S5542: Encryption algorithms should be used with secure mode and padding scheme (#4631) github-actions[bot] 2025-02-03 11:46:24 +01:00
  • 7f76ef9edf Increment RSPEC ID counter kaufco 2025-01-31 16:37:58 +00:00
  • 8c0356d55e
    SONARJAVA-5285 Modify rule S7180: update wrong rule description (#4643) erwan-serandour 2025-01-31 16:58:21 +01:00
  • 1e63f6a274
    Modify rule S4487: Fix error in code example (#4644) Sebastien Marichal 2025-01-31 15:47:52 +01:00
  • acb69ec40d Fix after review rule/add-RSPEC-S7193 Guillaume Dequenne 2025-01-31 14:26:07 +01:00
  • 577a9ff99d Increment RSPEC ID counter thomas-serre-sonarsource 2025-01-31 12:52:52 +00:00
  • 7e54acfafa
    Create go rule S5443: Using publicly writable directories is security-sensitive (#4632) github-actions[bot] 2025-01-31 11:52:04 +01:00
  • 17a753a84e SONARPY-2496 Create rule S7193 PySpark DataFrame toPandas function should be avoided guillaume-dequenne-sonarsource 2025-01-30 10:23:48 +00:00
  • e90f89c606 Increment RSPEC ID counter joke1196 2025-01-30 14:55:24 +00:00
  • 6916af074b Create rule S7194: PySpark broadcasting should be used when joining a small DataFrame to a larger DataFrame. rule/add-RSPEC-S7194 David Kunzmann 2025-01-30 15:11:06 +01:00
  • f9500f5c0e Create rule S7194 joke1196 2025-01-30 13:21:41 +00:00
  • 34338cc2a5 Increment RSPEC ID counter joke1196 2025-01-30 13:21:37 +00:00
  • 7fea45769e Increment RSPEC ID counter guillaume-dequenne-sonarsource 2025-01-30 10:23:43 +00:00
  • 14c80b84d0
    [NO-JIRA] Point coverage script to the enterprise sonar-go repository (#4635) Peter Trifanov 2025-01-30 10:19:54 +01:00
  • ead0d0a61b Increment RSPEC ID counter guillaume-dequenne-sonarsource 2025-01-29 14:31:26 +00:00
  • 9f09b09b8a Increment RSPEC ID counter thomas-serre-sonarsource 2025-01-29 14:16:33 +00:00
  • 1168630c4e
    Update GitHub CODEOWNERS (#4630) Massimo Paladin 2025-01-29 10:43:20 +01:00
  • be17e31527
    Create rule S4036 (#4625) github-actions[bot] 2025-01-29 09:48:53 +01:00
  • 8471f3d8a4
    SONARJAVA-5301 Create rule S7190: Methods annotated with "@BeforeTransaction" or "@AfterTransaction" must respect the contract (#4629) github-actions[bot] 2025-01-28 17:14:19 +01:00
  • d873f6b135
    SONARJAVA-5288 Create rule S7186: Methods returning "Page" or "Slice" must take "Pageable" as an input parameter (#4620) github-actions[bot] 2025-01-28 16:36:02 +01:00
  • 5e12d3beff
    SONARGO-175 ParsingError should be disabled by default (#4628) Nils Werner 2025-01-28 16:31:01 +01:00
  • 4bfe5a01d7
    SONARJAVA-5295 Modify rule S6809: add support for @Cacheable (#4626) leonardo-pilastri-sonarsource 2025-01-28 16:15:52 +01:00
  • b8975a2f82 Increment RSPEC ID counter erwan-serandour 2025-01-28 14:54:40 +00:00
  • aa8d9bdf34 Increment RSPEC ID counter guillaume-dequenne-sonarsource 2025-01-28 14:12:16 +00:00
  • 2dc3a33c3b
    NET-1038 Add symbolic-execution tag to our rules (#4621) Alex Meseldzija 2025-01-28 15:06:03 +01:00
  • 4c6681ee65
    SONARJAVA-5294 Create rule S7185: @eventlistener methods should have one parameter (#4618) github-actions[bot] 2025-01-28 14:41:15 +01:00
  • ec2258b717
    SONARJAVA-5293 Modify rule S6856 to also cover opposite case (#4619) leonardo-pilastri-sonarsource 2025-01-28 13:24:04 +01:00
  • 5b17f3acf0 Create rule S7188 rule/add-RSPEC-S7188 leonardo-pilastri-sonarsource 2025-01-28 10:35:04 +00:00