8000 Update semgrep scanner by Reet00 · Pull Request #2828 · secureCodeBox/secureCodeBox · GitHub
[go: up one dir, main page]

Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
Expand Up @@ -240,4 +240,4 @@ The possibility of using init containers adds a large number of new possible fea
[initc]: https://kubernetes.io/docs/concepts/workloads/pods/init-containers/
[initcvolumes]: https://kubernetes.io/docs/tasks/configure-pod-container/configure-pod-initialization/#create-a-pod-that-has-an-init-container
[gitleaks]: https://www.securecodebox.io/docs/scanners/gitleaks/
[semgrep]: https://github.com/returntocorp/semgrep
[semgrep]: https://github.com/semgrep/semgrep
2 changes: 1 addition & 1 deletion scanners/semgrep/.helm-docs.gotmpl
Original file line number Diff line number Diff line change
Expand Up @@ -14,7 +14,7 @@ appVersion: "{{ template "chart.appVersion" . }}"
usecase: "Static Code Analysis"
---

![Semgrep logo](https://raw.githubusercontent.com/returntocorp/semgrep-docs/main/static/img/semgrep-icon-text-horizontal.svg)
![Semgrep logo](https://raw.githubusercontent.com/semgrep/semgrep-docs/main/static/img/semgrep-icon-text-horizontal.svg)

{{- end }}

Expand Down
4 changes: 2 additions & 2 deletions scanners/semgrep/Chart.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -22,9 +22,9 @@ version: "v3.1.0-alpha1"
# incremented each time you make changes to the application. Versions are not expected to
# follow Semantic Versioning. They should reflect the version the application is using.
# It is recommended to use it with quotes.
appVersion: "1.95.0"
appVersion: "1.101.0"
annotations:
versionApi: https://api.github.com/repos/returntocorp/semgrep/releases/latest
versionApi: https://api.github.com/repos/semgrep/semgrep/releases/latest
supported-platforms: linux/amd64
kubeVersion: ">=v1.11.0-0"
home: https://www.securecodebox.io/docs/scanners/semgrep
Expand Down
4 changes: 2 additions & 2 deletions scanners/semgrep/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@ appVersion: "1.95.0"
usecase: "Static Code Analysis"
---

![Semgrep logo](https://raw.githubusercontent.com/returntocorp/semgrep-docs/main/static/img/semgrep-icon-text-horizontal.svg)
![Semgrep logo](https://raw.githubusercontent.com/semgrep/semgrep-docs/main/static/img/semgrep-icon-text-horizontal.svg)

<!--
SPDX-FileCopyrightText: the secureCodeBox authors
Expand Down Expand Up @@ -192,7 +192,7 @@ Kubernetes: `>=v1.11.0-0`
| scanner.extraVolumeMounts | list | `[]` | Optional VolumeMounts mapped into each scanJob (see: https://kubernetes.io/docs/concepts/storage/volumes/) |
| scanner.extraVolumes | list | `[]` | Optional Volumes mapped into each scanJob (see: https://kubernetes.io/docs/concepts/storage/volumes/) |
| scanner.image.pullPolicy | string | `"IfNotPresent"` | Image pull policy. One of Always, Never, IfNotPresent. Defaults to Always if :latest tag is specified, or IfNotPresent otherwise. More info: https://kubernetes.io/docs/concepts/containers/images#updating-images |
| scanner.image.repository | string | `"docker.io/returntocorp/semgrep"` | Container Image to run the scan |
| scanner.image.repository | string | `"docker.io/semgrep/semgrep"` | Container Image to run the scan |
| scanner.image.tag | string | `nil` | defaults to the charts appVersion |
| scanner.nodeSelector | object | `{}` | Optional nodeSelector settings that control how the scanner job is scheduled (see: https://kubernetes.io/docs/tasks/configure-pod-container/assign-pods-nodes/) |
| scanner.podSecurityContext | object | `{}` | Optional securityContext set on scanner pod (see: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/) |
Expand Down
2 changes: 1 addition & 1 deletion scanners/semgrep/docs/README.ArtifactHub.md
Original file line number Diff line number Diff line change
Expand Up @@ -197,7 +197,7 @@ Kubernetes: `>=v1.11.0-0`
| scanner.extraVolumeMounts | list | `[]` | Optional VolumeMounts mapped into each scanJob (see: https://kubernetes.io/docs/concepts/storage/volumes/) |
| scanner.extraVolumes | list | `[]` | Optional Volumes mapped into each scanJob (see: https://kubernetes.io/docs/concepts/storage/volumes/) |
| scanner.image.pullPolicy | string | `"IfNotPresent"` | Image pull policy. One of Always, Never, IfNotPresent. Defaults to Always if :latest tag is specified, or IfNotPresent otherwise. More info: https://kubernetes.io/docs/concepts/containers/images#updating-images |
| scanner.image.repository | string | `"docker.io/returntocorp/semgrep"` | Container Image to run the scan |
| scanner.image.repository | string | `"docker.io/semgrep/semgrep"` | Container Image to run the scan |
| scanner.image.tag | string | `nil` | defaults to the charts appVersion |
| scanner.nodeSelector | object | `{}` | Optional nodeSelector settings that control how the scanner job is scheduled (see: https://kubernetes.io/docs/tasks/configure-pod-container/assign-pods-nodes/) |
| scanner.podSecurityContext | object | `{}` | Optional securityContext set on scanner pod (see: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/) |
Expand Down
22 changes: 13 additions & 9 deletions scanners/semgrep/integration-tests/semgrep.test.js
Original file line number Diff line number Diff line change
Expand Up @@ -15,19 +15,23 @@ test(
[
"-c",
"r/python.django.security.injection.command.command-injection-os-system.command-injection-os-system",
"/test/",
"/test-semgrep/",
],
90,
// volumes
[{
"name": "test-dir",
"configMap": {"name": "semgrep-test-file"}
}],
[
{
name: "test-dir",
configMap: { name: "semgrep-test-file" },
},
],
// volumeMounts
[{
"mountPath": "/test/",
"name": "test-dir"
}],
[
{
mountPath: "/test-semgrep/",
name: "test-dir",
},
],
);

expect(count).toBe(3);
Expand Down
2 changes: 1 addition & 1 deletion scanners/semgrep/tests/__snapshot__/scanner_test.yaml.snap
Original file line number Diff line number Diff line change
Expand Up @@ -47,7 +47,7 @@ matches the snapshot:
env:
- name: foo
value: bar
image: docker.io/returntocorp/semgrep:0.0.0
image: docker.io/semgrep/semgrep:0.0.0
imagePullPolicy: IfNotPresent
name: semgrep
resources:
Expand Down
2 changes: 1 addition & 1 deletion scanners/semgrep/values.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -37,7 +37,7 @@ parser:
scanner:
image:
# scanner.image.repository -- Container Image to run the scan
repository: docker.io/returntocorp/semgrep
repository: docker.io/semgrep/semgrep
# scanner.image.tag -- defaults to the charts appVersion
tag: null
# -- Image pull policy. One of Always, Never, IfNotPresent. Defaults to Always if :latest tag is specified, or IfNotPresent otherwise. More info: https://kubernetes.io/docs/concepts/containers/images#updating-images
Expand Down
Loading
0