DataDog / datadog-static-analyzer

Datadog Static Analyzer
https://docs.datadoghq.com/static_analysis/
Apache License 2.0
100 stars 13 forks source link

[STAL-3020] Support validation #553

Closed juli1 closed 2 weeks ago

juli1 commented 3 weeks ago

What problem are you trying to solve?

We want to validate secrets

What is your solution?

  1. Support new secret rules formats with validation
  2. Build SDS rules with validation

Testing

Add unit. and integration test with validation (test only unvalidated secrets)

Validation

Configuration
=============
version                : 0.4.5
revision               : development
config method          : remote configuration
cores available        : 10
cores used             : 8
#static analysis rules : 58
#secrets rules loaded  : 21
source directory       : /var/folders/8v/d16566g17b91b7zq6t5wwp000000gn/T/tmp.qTPdPIU5sI/
subdirectories         :
output file            : /tmp/bahar.json
secrets enabled        : true
output format          : sarif
ignore paths           : **/node_modules/**/*,**/jspm_packages/**/*,**/.next/**/*,**/.vuepress/**/*,**/venv/**/*,**/__pycache__/**/*,**/_vendor/bundle/ruby/**/*,**/.vendor/bundle/ruby/**/*,**/.bundle/**/*,**/.gradle/**/*,**/TemporaryGeneratedFile_.*.cs,**/*.designer.cs,**/*.generated.cs,**/*.g.cs,**/*.g.i.cs
only paths             : all paths
ignore gitignore       : false
use debug              : false
use staging            : false
ignore gen files       : true
rules languages        : python
max file size          : 200 kb
Found 0 violation(s) in 0 file(s) using 0 rule(s) within 0 sec(s)
███████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████████ 6/6Found 4 secret(s) (including 1 valid) in 6 file(s) using 21 rule(s) within 0 sec(s)