Commit53d3c60

committed

update semgrep config with full details

1 parentd96fea2 commit53d3c60Copy full SHA for 53d3c60

File tree

1 file changed

+26

-16

lines changed

docs/tools
- semgrep.md

1 file changed

+26

-16

lines changed

`‎docs/tools/semgrep.md‎`

Lines changed: 26 additions & 16 deletions

Original file line number	Diff line number	Diff line change
`@@ -4,21 +4,43 @@ sidebar_label: Semgrep`
`4`	`4`	`description:CodeRabbit's guide to Semgrep.`
`5`	`5`	`---`
`6`	`6`
`7`		`-[Semgrep](https://semgrep.dev/) is a static analysis tool designed to scan code for security vulnerabilities and code quality issues..`
	`7`	`+[Semgrep](https://semgrep.dev/) is a static analysis tool designed to scan code`
	`8`	`+for security vulnerabilities and code quality issues.`
	`9`	`+`
	`10`	`+##Configuration`
	`11`	`+`
	`12`	`+Semgrep uses a YAML style configuration file.`
	`13`	`+`
	`14`	`+>Due to licensing it doesn't ship with the`
	`15`	`+>[community-created Semgrep rules](https://github.com/returntocorp/semgrep-rules),`
	`16`	`+>but you're free to use these in your own project.`
	`17`	`+`
	`18`	`+Semgrep supports the following config files:`
	`19`	`+`
	`20`	+- User-defined config file set at`reviews.tools.semgrep.config_file` in your
	`21`	+ project's`.coderabbit.yaml` file or setting the "Review → Tools → Semgrep →
	`22`	`+ Config File" field in CodeRabbit's settings page.`
	`23`	`+`
	`24`	+>**NOTE: If you do not set a config file in your`.coderabbit.yaml` or config
	`25`	`+>UI then semgrep will not be run.**`
	`26`	`+`
	`27`	`+##Links`
	`28`	`+`
	`29`	`+-[Semgrep Cli Reference](https://semgrep.dev/docs/cli-reference)`
`8`	`30`
`9`	`31`	`##Files`
`10`	`32`
`11`	`33`	`Semgrep will run on the following files and extensions:`
`12`	`34`
`13`	`35`	-`Apex`
`14`		--`Bash`
	`36`	+-`Bash`
`15`	`37`	-`.c`
`16`	`38`	-`.cpp`
`17`	`39`	-`.cs`
`18`	`40`	-`.clj`
`19`	`41`	-`.dart`
`20`	`42`	-`Dockerfile`
`21`		--`.ex`
	`43`	+-`.ex`
`22`	`44`	-`.html`
`23`	`45`	-`.go`
`24`	`46`	-`.java`
`@@ -36,7 +58,7 @@ Semgrep will run on the following files and extensions:`
`36`	`58`	-`.py`
`37`	`59`	-`.r`
`38`	`60`	-`.rb`
`39`		--`.rs`
	`61`	+-`.rs`
`40`	`62`	-`.scala`
`41`	`63`	-`Scheme`
`42`	`64`	-`.sol`
`@@ -48,15 +70,3 @@ Semgrep will run on the following files and extensions:`
`48`	`70`	-`.xml`
`49`	`71`	-`ERB`
`50`	`72`	-`Jinja`
`51`		`-`
`52`		`-##Configuration`
`53`		`-`
`54`		`-Semgrep uses a YAML style configuration file.`
`55`		`-`
`56`		`-Semgrep supports the following config files:`
`57`		`-`
`58`		-- User-defined config file set at`reviews.tools.semgrep.config_file` in your project's`.coderabbit.yaml` file or setting the "Review → Tools → Semgrep → Config File" field in CodeRabbit's settings page.
`59`		`-`
`60`		`-##Links`
`61`		`-`
`62`		`--[Semgrep Cli Reference](https://semgrep.dev/docs/cli-reference)`

0 commit comments

Comments

(0)

Movatterモバイル変換

Navigation Menu

Search code, repositories, users, issues, pull requests...

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Commit53d3c60

File tree

1 file changed

1 file changed

`‎docs/tools/semgrep.md‎`

0 commit comments