r7kamura
commented
2 years ago semgrepの使い方を学んでいる
- https://semgrep.dev/
- https://semgrep.dev/playground/new
- https://semgrep.dev/docs/semgrep-ci/overview/#github-actions
- https://github.com/returntocorp/semgrep
- https://github.com/marketplace/actions/semgrep-action
- https://github.com/actions/toolkit/blob/master/docs/problem-matchers.md
- https://zenn.dev/jrsyo/articles/279fb2c65cd8b2
- https://github.blog/2022-05-09-supercharging-github-actions-with-job-summaries/
- https://docs.github.com/en/actions/using-workflows/workflow-commands-for-github-actions
- GitHub Actionsで特殊なoutputを行う例
- https://semgrep.dev/docs/writing-rules/rule-syntax/
- 空の .semgrep/config.yml で --config .semgrep を指定してもエラーになる
- rulesが設定されてないと駄目かも
- https://github.com/r7kamura/rubocop-problem-matchers-action/blob/main/.github/matchers/rubocop.json
- https://github.community/t/checks-ability-to-include-markdown-in-line-annotations/14736
- annotationではplain textしか使えない
- htmlやmarkdownは使えない
- https://semgrep.dev/docs/getting-started/
- CLIで試す例が載っている
annotationの例。htmlはレンダリングされていない
手元だと次のように試している
docker run --rm --volume "${PWD}:/src" returntocorp/semgrep semgrep ci --config .semgrep
作業 with r7kamura #50 - YouTube