semgrep/semgrep

27 other commands the scanner could not classify

Commands from CI steps and task runners that look like checks but match no known tool. Some are checks, some are not.

• dune runtest libs/ocaml-tree-sitter-semgrep/core
• kinda_slow tests/default
• pr -R semgrep/e2e view $EXPR --json statusCheckRollup --jq '.statusCheckRollup
• pre-commit hook autoflake
• pre-commit hook check-docstring-first
• pre-commit hook check-shebang-scripts-are-executable
• pre-commit hook check-symlinks
• pre-commit hook check-vcs-permalinks
• pre-commit hook check-xml
• pre-commit hook destroyed-symlinks
• pre-commit hook fix-encoding-pragma
• pre-commit hook jsonnet-format
• pre-commit hook no-commit-to-branch
• pre-commit hook reorder-python-imports
• pre-commit hook requirements-txt-fixer
• pre-commit hook semgrep-docker-develop
• python tests/e2e-pro-need-login
• python tests/qa
• quick tests/default
• running the test"
• show -s --format=%aN <%aE> ${COMMITS%%$'\n'*})
• skipping the test"
• testing every grammar'
• true
• while [ ${LEN_CHECKS} = 0 ]
• write_all_languages_and_exit Testing every grammar
• xargs opam install --deps-only --dry-run 2>&1)

full scan as JSON

• require module documentationAll modules containing functions should have corresponding .mli files with comprehensive documentation. The .mli file must include: 1. **...

  semgrep/semgrep Documentation Other security 2024-03-31

  copy raw open
• avoid failwith patternsAvoid using `failwith`, `assert false`, and similar blunt error handling mechanisms that can turn recoverable errors into unrecoverable o...

  semgrep/semgrep Error Handling Other security 2025-03-03

  copy raw open
• prefer simple readable codeChoose clarity and simplicity over clever or complex constructs. Avoid unnecessary abstractions, complex function compositions, and "clev...

  semgrep/semgrep Code Style Other security 2024-12-02

  copy raw open
• Use descriptive namesNames should clearly and accurately describe their purpose, avoiding abbreviations, acronyms, and misleading terms. This applies to varia...

  semgrep/semgrep Naming Conventions Other security 2024-05-07

  copy raw open
• Choose efficient algorithmsWhen implementing algorithms, prioritize computational efficiency by selecting appropriate data structures and avoiding unnecessarily com...

  semgrep/semgrep Algorithms Other security 2024-03-07

  copy raw open
• validate environment variable usageAlways validate environment variables with proper fallback logic and avoid unnecessary usage in tests or when defaults suffice. Check for...

  semgrep/semgrep Configurations Python security 2025-03-27

  copy raw open
• Add CI safety checksImplement defensive checks and error handling in CI/CD workflows to prevent failures and ensure robust operations. This includes validati...

  semgrep/semgrep CI/CD Other security 2024-05-22

  copy raw open
• Design consistent tracing interfacesWhen implementing observability features like tracing, prioritize consistent and extensible API design. Use structured annotations that c...

  semgrep/semgrep Observability Other security 2024-04-25

  copy raw open
• Document configuration choicesAdd explanatory comments for non-obvious configuration settings, especially when they deviate from defaults or serve specific purposes. C...

  semgrep/semgrep Configurations Other security 2024-04-17

  copy raw open
• Simplify complex logicBreak down complex code structures into simpler, more readable forms. Long indented blocks, verbose conditionals, and repetitive patterns...

  semgrep/semgrep Code Style Python security 2024-04-17

  copy raw open
• Document code purposeEnsure that code elements have clear documentation explaining their purpose, behavior, and context. This includes function parameters (es...

  semgrep/semgrep Documentation Python security 2024-04-11

  copy raw open
• Benchmark performance assumptionsAlways validate performance concerns with actual measurements before making optimization decisions. Avoid making assumptions about what i...

  semgrep/semgrep Performance Optimization Other security 2024-04-09

  copy raw open
• CI workflow optimizationOptimize CI/CD workflows by prioritizing reliability over convenience and leveraging built-in platform features. When workflows generate ...

  semgrep/semgrep CI/CD Yaml security 2024-03-06

  copy raw open
• Use appropriate log levelsChoose log levels based on the intended audience to prevent user-visible noise. Most logging should use `Logs.debug` rather than `Logs.in...

  semgrep/semgrep Logging Other security 2024-02-13

  copy raw open
• Use typed interfacesPrefer typed interfaces over dictionary access to enable static type checking and prevent null reference errors. When accessing data stru...

  semgrep/semgrep Null Handling Python security 2024-05-10

  copy raw open
• Ensure comprehensive test coverageTests should validate all expected behaviors, variants, and edge cases rather than covering only the happy path. When implementing tests,...

  semgrep/semgrep Testing Yaml security 2024-04-29

  copy raw open
• Document configuration troubleshootingConfiguration files and scripts should include comprehensive documentation that helps developers understand their purpose, scope, and how...

  semgrep/semgrep Configurations Shell security 2024-04-18

  copy raw open
• Add comprehensive test coverageEnsure all code changes include appropriate unit tests and address any identified testing gaps immediately. When reviewing code, verify t...

  semgrep/semgrep Testing Other security 2024-03-29

  copy raw open
• Defensive authorization checksAlways implement explicit authentication and authorization checks before granting access to premium features or sensitive operations, eve...

  semgrep/semgrep Security Python security 2024-03-25

  copy raw open
• Use descriptive variable namesChoose variable and parameter names that clearly communicate their purpose and avoid misleading or cryptic naming. Names should be self-d...

  semgrep/semgrep Naming Conventions Python security 2024-03-25

  copy raw open
• Conservative security assumptionsWhen implementing security measures, always err on the side of caution by making conservative assumptions about potential risks. This pri...

  semgrep/semgrep Security Other security 2024-03-19

  copy raw open
• Defensive optional handlingAlways handle optional and nullable values defensively by checking for null/empty states before use and handling multiple optional values...

  semgrep/semgrep Null Handling Other security 2024-03-06

  copy raw open
• Use proper URI parsingWhen working with URLs and URIs in networking code, use proper URI parsing libraries and types instead of string manipulation or regex va...

  semgrep/semgrep Networking Other security 2025-02-06

  copy raw open
• use consistent JavaScript syntaxMaintain consistent use of modern JavaScript syntax throughout networking code to improve reliability and maintainability. Use `const` or...

  semgrep/semgrep Networking JavaScript security 2024-04-26

  copy raw open
• Validate CI pipeline inputsAlways validate and sanitize dynamic inputs in CI/CD pipelines before using them in URLs, file operations, or other system interactions. ...

  semgrep/semgrep CI/CD Python security 2024-04-05

  copy raw open
• use appropriate test markersTest markers and annotations should match the test type and context they're applied to. Different test categories (unit tests, e2e tests,...

  semgrep/semgrep Testing Python security 2024-02-29

  copy raw open
• justify error handling designWhen implementing error handling mechanisms, ensure that design decisions are well-justified and properly reasoned. This applies to both ...

  semgrep/semgrep Error Handling Python security 2023-11-08

  copy raw open