Commits

Branch selector

 develop

User selector

mmcqd

Datepicker

All time

Commit History

Commits on Oct 28, 2022

• feat: Fail early on bad version ranges in supply chain rules (semgrep#6413)

  Show description for c4d824b
  mmcqd

  authored
  c4d824b

  Copy full SHA for c4d824b

Commits on Oct 12, 2022

• fix: remove gradle as a separate supply chain ecosystem (semgrep#6297)

  Show description for a32ccd0
  

  mmcqd

  and

  github-actions[bot]

  authored
  a32ccd0

  Copy full SHA for a32ccd0

Commits on Oct 11, 2022

• fix: Handle nested transitive dependencies in package-lock.json (semgrep#6282)

  Show description for 025c3b0
  

  mmcqd

  and

  github-actions[bot]

  authored
  025c3b0

  Copy full SHA for 025c3b0

Commits on Oct 7, 2022

• fix: Don't size filter lockfiles (semgrep#6269)

  Show description for f3ea0b4
  mmcqd

  authored
  f3ea0b4

  Copy full SHA for f3ea0b4

Commits on Oct 4, 2022

• fix(SSC): package-lock parse error (semgrep#6241)

  Show description for b6b536e
  

  mmcqd

  and

  github-actions[bot]

  authored
  b6b536e

  Copy full SHA for b6b536e

Commits on Sep 19, 2022

• chore: Bump version to 0.114.0

  mmcqd

  committed
  0862a05

  Copy full SHA for 0862a05

Commits on Sep 16, 2022

• fix(SC): Don't access fields in manifest files without checking that they exist (semgrep#6109)

  Show description for 604f2d2
  mmcqd

  authored
  604f2d2

  Copy full SHA for 604f2d2

Commits on Sep 13, 2022

• feat: lockfile line numbers in supply chain findings for python/js (semgrep#6092)

  Show description for 0d084eb
  

  mmcqd

  and

  github-actions[bot]

  authored
  0d084eb

  Copy full SHA for 0d084eb

• feat: Transitivity Detection for Supply Chain (semgrep#6049)

  Show description for 35f06e3
  

  mmcqd

  and

  github-actions[bot]

  authored
  35f06e3

  Copy full SHA for 35f06e3

Commits on Sep 8, 2022

• Field Sensitive Tainting (semgrep#5697)

  Show description for 756408a
  

  mmcqd

  and

  IagoAbal

  authored
  756408a

  Copy full SHA for 756408a

Commits on Aug 23, 2022

• chore: Bump version to 0.111.1

  mmcqd

  committed
  d3a6dc7

  Copy full SHA for d3a6dc7

• fix: Mark all unreachable supply chain findings as non-blocking (semgrep#5967)

  Show description for 35d5e78
  mmcqd

  authored
  35d5e78

  Copy full SHA for 35d5e78

Commits on Aug 19, 2022

• feat: Update Supply Chain API (semgrep#5943)

  Show description for 5a114ae
  mmcqd

  authored
  5a114ae

  Copy full SHA for 5a114ae

Commits on Aug 2, 2022

• feat(SCA): Revamp SCA findings generation (semgrep#5806)

  Show description for 2a91874
  

  mmcqd

  and

  underyx

  authored
  2a91874

  Copy full SHA for 2a91874

Commits on Jul 13, 2022

• fix changelog formatting

  mmcqd

  committed
  8976e37

  Copy full SHA for 8976e37

• chore: Bump version to 0.104.0

  mmcqd

  committed
  a4143a7

  Copy full SHA for a4143a7

Commits on Jun 30, 2022

• Scala: allow ellipsis in for loop headers (semgrep#5661)

  Show description for 6368cff
  

  mmcqd

  and

  aryx

  authored
  6368cff

  Copy full SHA for 6368cff

Commits on Jun 24, 2022

• Enable deep expression matching on HTML in JS (semgrep#5616)

  Show description for ec5e501
  

  mmcqd

  and

  aryx

  authored
  ec5e501

  Copy full SHA for ec5e501

Commits on Jun 14, 2022

• PHP: Support named arguments in patterns + refactor arguments in AST (semgrep#5511)

  Show description for 2990786
  mmcqd

  authored
  2990786

  Copy full SHA for 2990786

Commits on Jun 10, 2022

• Dataflow: translate spread operators in record expressions to IL (semgrep#5473)

  Show description for eda6831
  mmcqd

  authored
  eda6831

  Copy full SHA for eda6831

Commits on Jun 8, 2022

• Add untyped SCA output to app findings + test RuleMatch to app finding conversion (semgrep#5459)

  Show description for 692078a
  mmcqd

  authored
  692078a

  Copy full SHA for 692078a

Commits on Jun 7, 2022

• guard call to declare_var, handle typed pats in classes for scala, test (semgrep#5449)

  mmcqd

  authored
  85b8540

  Copy full SHA for 85b8540

Commits on Jun 6, 2022

• Scala: do not parse parenthesized expressions as unary tuples (semgrep#5387)

  Show description for 2d3b592
  

  mmcqd

  and

  github-actions[bot]

  authored
  2d3b592

  Copy full SHA for 2d3b592

• SCA: parse yarn lockfiles with no dependencies and dependencies with no url (semgrep#5393)

  Show description for 4994cb4
  

  mmcqd

  and

  github-actions[bot]

  authored
  4994cb4

  Copy full SHA for 4994cb4

Commits on Jun 3, 2022

• Revert "include sca output in app findings (semgrep#5385)" (semgrep#5428)

  Show description for 221dfab
  mmcqd

  authored
  221dfab

  Copy full SHA for 221dfab

• do basic const prop on resolved_name variables (semgrep#5419)

  mmcqd

  authored
  9887673

  Copy full SHA for 9887673

Commits on Jun 2, 2022

• include sca output in app findings (semgrep#5385)

  mmcqd

  authored
  bbe9ef5

  Copy full SHA for bbe9ef5

Commits on May 31, 2022

• Pretty SCA Results (semgrep#5287)

  Show description for 42fcff8
  mmcqd

  authored
  42fcff8

  Copy full SHA for 42fcff8

• SCA: support Gradle and Poetry lockfiles (semgrep#5302)

  Show description for e557f6b
  mmcqd

  authored
  e557f6b

  Copy full SHA for e557f6b

Commits on May 25, 2022

• Add constant propagation to Dockerfile, support constant propagation for metavariable regex (semgrep#5011)

  Show description for 64f4bc5
  

  7 peopleauthored
  64f4bc5

  Copy full SHA for 64f4bc5

Commits on May 13, 2022

• fix: Include fixed_lines field in JSON output when --autofix --dryrun (semgrep#5217)

  Show description for e3b1755
  mmcqd

  authored
  e3b1755

  Copy full SHA for e3b1755

Commits on May 11, 2022

• chore: Bump version to 0.92.0

  mmcqd

  committed
  e8fc119

  Copy full SHA for e8fc119

• SCA: Various bug fixes/improvements (semgrep#5149)

  Show description for 4c4cc8c
  mmcqd

  authored
  4c4cc8c

  Copy full SHA for 4c4cc8c

Commits on Apr 15, 2022

• SCA: respect .semgrepignore when scanning lockfiles (semgrep#5032)

  Show description for 4d27ef7
  

  mmcqd

  and

  brendongo

  authored
  4d27ef7

  Copy full SHA for 4d27ef7

• SCA: Correctly handle package-lock.json from npm >= 7, parse yarn.lock files correctly (semgrep#5030)

  Show description for 303a1e1
  mmcqd

  authored
  303a1e1

  Copy full SHA for 303a1e1

Pagination

Previous

Next