trailofbits / trailofbits/testing-handbook

Creating rules that analyze across files

Open
#1 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

good first issue Semgrep TODO
Dominant language
HTML
Stars
135
Forks
22
PR merge metrics
No merged PRs in 30d

Description

Research the pro feature allowing for rules that catch bugs between files.

https://semgrep.dev/docs/semgrep-code/semgrep-pro-engine-intro/#creating-rules-that-analyze-across-files

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reading the linked Semgrep Pro Engine documentation on creating rules that analyze across files. The issue names no handbook file, test, expected output, or placement for the research, so completion would require defining the documentation scope and where the findings belong.

Written by the indexing model from the issue text.

Assessment

Domain
security
Issue type
Documentation
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.