MetaMask / MetaMask/action-security-code-scanner
Semgrep Rule ID is Path Based
Open
bug
- Dominant language
- JavaScript
- Stars
- 10
- Forks
- 7
- PR merge metrics
- No merged PRs in 30d
Description
Semgrep's ruleID is based on the path where the rule is stored. This means that as we adjust the path the rule lives in, GitHub advanced security will consider it to be a new rule. This can result in existing alerts being closed, with duplicates opened in their place.
Contributor guide
No contributing guide indexed for this repository
Research direction
No files, tests, or entry points are named. Start by locating where Semgrep rule IDs are passed into GitHub Advanced Security and reproduce a rule-path change; done means path changes no longer close existing alerts and create duplicates.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- github-actions, javascript
- Domain
- devops, security
- Issue type
- Bug
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100