Commit graph

7 commits

Author SHA1 Message Date
cd rubin
d9ee7611b7
semgrep github workflow updated to show style guide warnings in ./semgrep as annotations and error
* semgrep github workflow updated to show warnings

* Add explicit messaging for how to skip semgrep check and intensify messaging to produce errors

* adding passthrough error code handling to jq and model the same in the semgrep-repo-rules tool

* Use $PIPESTATUS to get error code of item in piped command list

* show the error code values along pipeline to seek issue

* Specify bash in shell config as sh is the default inside a container

* Exit with correct error code

* show semgrep messages as warning annotations to distinguish from semgrep error code

* add use of [skip style guide check] in commit message

* Set COMMIT_MESSAGE environment variable with last commit message

* COMMIT_MESSAGE needs to set to the second to last message to skip the autogenerated merge message

* Grabbing commit SHA from the pull_request event

* Add explantory message inside configure step

* Show commit message cleanly in configure step

* Use tee to set the environment variable and show the value it is set to

* keep semgrep return code intact from local tool run
2025-12-05 11:28:06 +00:00
cd rubin
1e146bf316
Example custom semgrep rule for detecting fixed time references that is stored in repo for scanning against pull requests (#26647)
* Include custom semgrep rule stored in repo for scanning against pull requests

* disable metrics and root path to avoid warnings

* This rule must use the generic semgrep parser

* include a way to skip the local semgrep scan by including [skip semgrep] in commit message

* Require a fetch-depth of 0 to get all of the history

* Iin CI we compare committed changes made but when run locally we want to consider all changes made to the working directory (including uncommitted)

* Improved warning message for coming soon and included both committed and uncommitted changes in the local semgrep check

* Avoid fatal git error on ownership within CLI working directory
2025-11-24 15:40:08 +00:00
dependabot[bot]
a0aa8fbc44
Bump golang.org/x/net from 0.17.0 to 0.23.0 in /tools (#14304)
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.17.0 to 0.23.0.
- [Commits](https://github.com/golang/net/compare/v0.17.0...v0.23.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-04-29 12:19:57 -05:00
dependabot[bot]
318d55c5eb
Bump google.golang.org/protobuf from 1.28.0 to 1.33.0 in /tools (#14033)
Bumps google.golang.org/protobuf from 1.28.0 to 1.33.0.

---
updated-dependencies:
- dependency-name: google.golang.org/protobuf
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-04-15 17:59:02 -05:00
dependabot[bot]
c78bfa8bab
Bump golang.org/x/net from 0.7.0 to 0.17.0 in /tools (#11274)
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.7.0 to 0.17.0.
- [Commits](https://github.com/golang/net/compare/v0.7.0...v0.17.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-13 09:18:30 -06:00
Daniel Walsh
485c426da2
Log status code from Jira if issue creation fails (#10622) 2023-09-08 23:22:43 +01:00
Jacob Bednarz
875010629a
feat(tools): support syncing issues internally (#8621)
Introduces some automation to take the GitHub issue and sync it
internally allowing us to map internal/external and track in both
systems.
2023-05-01 08:39:31 -05:00