lint: Add initial semgrep config
authorKim Alvefur <zash@zash.se>
Mon, 18 Jan 2021 17:28:34 +0100
changeset 11293 c6965f3c321c
parent 11292 5fd1f1b544a0
child 11294 7919ecdc4a72
lint: Add initial semgrep config
.semgrep.yml
--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/.semgrep.yml	Mon Jan 18 17:28:34 2021 +0100
@@ -0,0 +1,24 @@
+rules:
+- id: log-variable-fmtstring
+  patterns:
+    - pattern: log("...", $A)
+    - pattern-not: log("...", "...")
+  message: Variable passed as format string to logging
+  languages: [lua]
+  severity: ERROR
+- id: module-log-variable-fmtstring
+  patterns:
+    - pattern: module:log("...", $A)
+    - pattern-not: module:log("...", "...")
+  message: Variable passed as format string to logging
+  languages: [lua]
+  severity: ERROR
+- id: module-getopt-string-default
+  patterns:
+    - pattern: module:get_option_string("...", $A)
+    - pattern-not: module:get_option_string("...", "...")
+    - pattern-not: module:get_option_string("...", host)
+    - pattern-not: module:get_option_string("...", module.host)
+  message: Non-string default from :get_option_string
+  severity: ERROR
+  languages: [lua]