search

nccgroup / VCG

VisualCodeGrepper - Code security scanning tool.
GNU General Public License v3.0
523 stars 116 forks source link

Rules for sonar #10

Open frkr opened 6 years ago

frkr commented 6 years ago

why not?

dommyzee commented 1 year ago

why not?

Are the rules open sourced, and if so, can you provide a link to them?

frkr commented 1 year ago

ok: https://github.com/SonarSource

And I have no idea why I asked this question in 2018.

dommyzee commented 1 year ago

ok: https://github.com/SonarSource

And I have no idea why I asked this question in 2018.

Thanks! I've looked through the .NET ones, and there are ~10 security-related rules. The rest appear to be more code quality.

Is there any specific ones you required to implement, given there are thousands of rules across dozens of languages? Each rule would need to be taken apart and implemented, so its not a quick - copy/paste of the code.