ZupIT / horusec

Horusec is an open source tool that improves identification of vulnerabilities in your project with just one command.
https://horusec.io/
Apache License 2.0
1.15k stars 189 forks source link

I want feature to pass custom arguments to specific tools (e.g semgrep rule) #1106

Open ne0z opened 2 years ago

ne0z commented 2 years ago

What would you like to be added: As per check on this code internal/services/formatters/generic/semgrep/config.go#L19, the Horusec using p/r2c-ci ruleset. So, I want a feature to change semgrep ruleset dynamically from Horusec configuration

Why is this needed: So many semgrep ruleset on the https://semgrep.dev/explore, hardcoded to p/r2c-ci ruleset would only limit its original abilities.