{"payload":{"feedbackUrl":"https://github.com/orgs/community/discussions/53140","repo":{"id":227803815,"defaultBranch":"develop","name":"semgrep","ownerLogin":"semgrep","currentUserCanPush":false,"isFork":false,"isEmpty":false,"createdAt":"2019-12-13T09:29:54.000Z","ownerAvatar":"https://avatars.githubusercontent.com/u/29760937?v=4","public":true,"private":false,"isOrgOwned":true},"refInfo":{"name":"","listCacheKey":"v0:1715817740.0","currentOid":""},"activityList":{"items":[{"before":"e693af7ee026d314b3aa9ffe8852de80ac4e25ba","after":"8a8a984c9f6f96584adbb0a1f1702c7f9964d846","ref":"refs/heads/martin/update-dockerfile-parser","pushedAt":"2024-05-16T00:18:46.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"mjambon","name":"Martin Jambon","path":"/mjambon","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/343265?s=80&v=4"},"commit":{"message":"Add function 'combine_sparse_toks'","shortMessageHtmlLink":"Add function 'combine_sparse_toks'"}},{"before":null,"after":"e7555f76bfe6b38d407ad66992033b3905c47024","ref":"refs/heads/update-semgrep-rules-9104235032-1","pushedAt":"2024-05-16T00:02:20.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"semgrep-ci[bot]","name":null,"path":"/apps/semgrep-ci","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/29760937?s=80&v=4"},"commit":{"message":"update semgrep rules","shortMessageHtmlLink":"update semgrep rules"}},{"before":"994acbd7037fb6058cb70547a7f1a65ed4567718","after":"0dd693c5f29b4fa632be55682da59ed8cec145c8","ref":"refs/heads/develop","pushedAt":"2024-05-15T22:45:00.000Z","pushType":"pr_merge","commitsCount":3,"pusher":{"login":"IagoAbal","name":"Iago Abal","path":"/IagoAbal","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/5313615?s=80&v=4"},"commit":{"message":"devops: quick-fix: Disable 'benchmarks-full' in OSS (semgrep/semgrep-proprietary#1521)\n\nThese benchmarks use rule-ids and paths with difference prefixes than\nthe Pro benchmarks (OSS.perf and OSS/perf) thus causing problems with\nmasking.\n\nWe quick-fix this by disabling the benchmarks, given that we have the\nArgo-based semgrep-compare benchmarks as a safeguard. It may be more\nproductive to integrate these benchmarks into the Pro's workflow.\n\ntest plan:\nSync and check OSS's CI\n\nsynced from 53265fde316d01109b1c0f026b5ba58940b7f9dd","shortMessageHtmlLink":"devops: quick-fix: Disable 'benchmarks-full' in OSS (semgrep/semgrep-…"}},{"before":"e60cbaaaaf8ed4d4a56b3df42a591daf4ae2ed8a","after":null,"ref":"refs/heads/sync-with-pro-1715797443","pushedAt":"2024-05-15T22:45:00.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"IagoAbal","name":"Iago Abal","path":"/IagoAbal","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/5313615?s=80&v=4"}},{"before":null,"after":"e60cbaaaaf8ed4d4a56b3df42a591daf4ae2ed8a","ref":"refs/heads/sync-with-pro-1715797443","pushedAt":"2024-05-15T18:25:37.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"IagoAbal","name":"Iago Abal","path":"/IagoAbal","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/5313615?s=80&v=4"},"commit":{"message":"devops: quick-fix: Disable 'benchmarks-full' in OSS (semgrep/semgrep-proprietary#1521)\n\nThese benchmarks use rule-ids and paths with difference prefixes than\nthe Pro benchmarks (OSS.perf and OSS/perf) thus causing problems with\nmasking.\n\nWe quick-fix this by disabling the benchmarks, given that we have the\nArgo-based semgrep-compare benchmarks as a safeguard. It may be more\nproductive to integrate these benchmarks into the Pro's workflow.\n\ntest plan:\nSync and check OSS's CI\n\nsynced from 53265fde316d01109b1c0f026b5ba58940b7f9dd","shortMessageHtmlLink":"devops: quick-fix: Disable 'benchmarks-full' in OSS (semgrep/semgrep-…"}},{"before":null,"after":"994acbd7037fb6058cb70547a7f1a65ed4567718","ref":"refs/heads/sync-with-pro-1715783895","pushedAt":"2024-05-15T14:39:25.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"IagoAbal","name":"Iago Abal","path":"/IagoAbal","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/5313615?s=80&v=4"},"commit":{"message":"add mypy to precommit (#1518)\n\ntest plan:\nintroduce some typing errors in OSS/cli/src/semgrep/util.py\nand pre-commit run -a is finding them\n\nsynced from b332d821460837262eac5a581e942ed8c1d29567","shortMessageHtmlLink":"add mypy to precommit (#1518)"}},{"before":null,"after":"994acbd7037fb6058cb70547a7f1a65ed4567718","ref":"refs/heads/sync-with-pro-1715783333","pushedAt":"2024-05-15T14:29:51.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"IagoAbal","name":"Iago Abal","path":"/IagoAbal","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/5313615?s=80&v=4"},"commit":{"message":"add mypy to precommit (#1518)\n\ntest plan:\nintroduce some typing errors in OSS/cli/src/semgrep/util.py\nand pre-commit run -a is finding them\n\nsynced from b332d821460837262eac5a581e942ed8c1d29567","shortMessageHtmlLink":"add mypy to precommit (#1518)"}},{"before":"568b3497d21ac4b62c7a58869656f03b10ce6f4e","after":null,"ref":"refs/heads/sync-with-pro-1715774828","pushedAt":"2024-05-15T13:02:48.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"aryx","name":"Yoann Padioleau","path":"/aryx","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/332336?s=80&v=4"}},{"before":"f56d8bde56a953e44406942fdf88ad94db538740","after":"994acbd7037fb6058cb70547a7f1a65ed4567718","ref":"refs/heads/develop","pushedAt":"2024-05-15T13:02:47.000Z","pushType":"pr_merge","commitsCount":10,"pusher":{"login":"aryx","name":"Yoann Padioleau","path":"/aryx","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/332336?s=80&v=4"},"commit":{"message":"add mypy to precommit (#1518)\n\ntest plan:\nintroduce some typing errors in OSS/cli/src/semgrep/util.py\nand pre-commit run -a is finding them\n\nsynced from b332d821460837262eac5a581e942ed8c1d29567","shortMessageHtmlLink":"add mypy to precommit (#1518)"}},{"before":null,"after":"568b3497d21ac4b62c7a58869656f03b10ce6f4e","ref":"refs/heads/sync-with-pro-1715774828","pushedAt":"2024-05-15T12:10:15.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"IagoAbal","name":"Iago Abal","path":"/IagoAbal","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/5313615?s=80&v=4"},"commit":{"message":"add mypy to precommit (#1518)\n\ntest plan:\nintroduce some typing errors in OSS/cli/src/semgrep/util.py\nand pre-commit run -a is finding them\n\nsynced from b332d821460837262eac5a581e942ed8c1d29567","shortMessageHtmlLink":"add mypy to precommit (#1518)"}},{"before":null,"after":"8fbdd74ea81b6ccd896c4a72dfd5e144ba12d362","ref":"refs/heads/sync-with-pro-1715768619","pushedAt":"2024-05-15T10:27:22.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"IagoAbal","name":"Iago Abal","path":"/IagoAbal","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/5313615?s=80&v=4"},"commit":{"message":"precommit part3: adding flake8 from OSS (#1515)\n\ntest plan:\npre-commit run -a\n\nsynced from 7476ab566890701c85fe1fe1c370437dca2b2fbb","shortMessageHtmlLink":"precommit part3: adding flake8 from OSS (#1515)"}},{"before":null,"after":"b41cd75d0e33dc1e04d8bd163103d244f5eafa29","ref":"refs/heads/sync-with-pro-1715764410","pushedAt":"2024-05-15T09:18:43.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"IagoAbal","name":"Iago Abal","path":"/IagoAbal","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/5313615?s=80&v=4"},"commit":{"message":"precommit part3: adding flake8 from OSS (#1515)\n\ntest plan:\npre-commit run -a\n\nsynced from 7476ab566890701c85fe1fe1c370437dca2b2fbb","shortMessageHtmlLink":"precommit part3: adding flake8 from OSS (#1515)"}},{"before":null,"after":"75f2a016249cc691b7c50db915618f81152aac21","ref":"refs/heads/sync-with-pro-1715762069","pushedAt":"2024-05-15T08:37:39.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"IagoAbal","name":"Iago Abal","path":"/IagoAbal","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/5313615?s=80&v=4"},"commit":{"message":"Relax OSS/.pre-commit-config.yaml (#1511)\n\ntest plan:\nwait for sync script of iago and see if precommit now pass\nfor https://github.com/semgrep/semgrep/pull/10241\n\nsynced from 55840a1d105aece6cb5d054dbd3f08696ca40d49","shortMessageHtmlLink":"Relax OSS/.pre-commit-config.yaml (#1511)"}},{"before":null,"after":"e29008f3eca8b52fe66fb463d6398b1d04acb920","ref":"refs/heads/sync-with-pro-1715761225","pushedAt":"2024-05-15T08:23:19.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"IagoAbal","name":"Iago Abal","path":"/IagoAbal","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/5313615?s=80&v=4"},"commit":{"message":"Relax OSS/.pre-commit-config.yaml (#1511)\n\ntest plan:\nwait for sync script of iago and see if precommit now pass\nfor https://github.com/semgrep/semgrep/pull/10241\n\nsynced from 55840a1d105aece6cb5d054dbd3f08696ca40d49","shortMessageHtmlLink":"Relax OSS/.pre-commit-config.yaml (#1511)"}},{"before":null,"after":"e88ef06375c662ff2f1cdc4d0eb014d9420fe230","ref":"refs/heads/sync-with-pro-TEST-1715718205","pushedAt":"2024-05-14T20:25:29.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"IagoAbal","name":"Iago Abal","path":"/IagoAbal","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/5313615?s=80&v=4"},"commit":{"message":"Relax OSS/.pre-commit-config.yaml (#1511)\n\ntest plan:\nwait for sync script of iago and see if precommit now pass\nfor https://github.com/semgrep/semgrep/pull/10241\n\nsynced from 55840a1d105aece6cb5d054dbd3f08696ca40d49","shortMessageHtmlLink":"Relax OSS/.pre-commit-config.yaml (#1511)"}},{"before":null,"after":"4dcf1ef9729447c402e59091843d30a0e70b3496","ref":"refs/heads/sync-with-pro-TEST-1715717704","pushedAt":"2024-05-14T20:17:08.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"IagoAbal","name":"Iago Abal","path":"/IagoAbal","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/5313615?s=80&v=4"},"commit":{"message":"Relax OSS/.pre-commit-config.yaml (#1511)\n\ntest plan:\nwait for sync script of iago and see if precommit now pass\nfor https://github.com/semgrep/semgrep/pull/10241\n\nsynced from 55840a1d105aece6cb5d054dbd3f08696ca40d49","shortMessageHtmlLink":"Relax OSS/.pre-commit-config.yaml (#1511)"}},{"before":null,"after":"fa329f7e251a33d9cd74a572d45bd79e3ddbe8ac","ref":"refs/heads/sync-with-pro-TEST-1715716987","pushedAt":"2024-05-14T20:13:05.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"IagoAbal","name":"Iago Abal","path":"/IagoAbal","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/5313615?s=80&v=4"},"commit":{"message":"Relax OSS/.pre-commit-config.yaml (#1511)\n\ntest plan:\nwait for sync script of iago and see if precommit now pass\nfor https://github.com/semgrep/semgrep/pull/10241\n\nsynced from 55840a1d105aece6cb5d054dbd3f08696ca40d49","shortMessageHtmlLink":"Relax OSS/.pre-commit-config.yaml (#1511)"}},{"before":"588da4af6bbe5ec2f96daddc57ae262b9d6e4df4","after":"0099c9fca811d750f1b666a60202575a98bfb6ed","ref":"refs/heads/test_fix_pro","pushedAt":"2024-05-14T19:13:38.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"aryx","name":"Yoann Padioleau","path":"/aryx","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/332336?s=80&v=4"},"commit":{"message":"more","shortMessageHtmlLink":"more"}},{"before":"50d1060e97ef469321c2fefac487c5127823a50d","after":"588da4af6bbe5ec2f96daddc57ae262b9d6e4df4","ref":"refs/heads/test_fix_pro","pushedAt":"2024-05-14T19:02:36.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"aryx","name":"Yoann Padioleau","path":"/aryx","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/332336?s=80&v=4"},"commit":{"message":"more","shortMessageHtmlLink":"more"}},{"before":null,"after":"50d1060e97ef469321c2fefac487c5127823a50d","ref":"refs/heads/test_fix_pro","pushedAt":"2024-05-14T18:57:41.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"aryx","name":"Yoann Padioleau","path":"/aryx","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/332336?s=80&v=4"},"commit":{"message":"TEST fix check-semgrep-pro.jsonnet (DO NOT MERGE)\n\nAt some point I need to do it in pro instead,\nbut easier to test from semgrep for now.\n\ntest plan:\nwait for green CI check","shortMessageHtmlLink":"TEST fix check-semgrep-pro.jsonnet (DO NOT MERGE)"}},{"before":"44cf8248c6650217b9c665c2379305c019b754ff","after":"abfc3bdc08ae6d119c9ccb1a2d1889299873b513","ref":"refs/heads/sync-with-pro","pushedAt":"2024-05-14T17:49:13.000Z","pushType":"push","commitsCount":2,"pusher":{"login":"IagoAbal","name":"Iago Abal","path":"/IagoAbal","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/5313615?s=80&v=4"},"commit":{"message":"Relax OSS/.pre-commit-config.yaml (#1511)\n\ntest plan:\nwait for sync script of iago and see if precommit now pass\nfor https://github.com/semgrep/semgrep/pull/10241\n\nsynced from 55840a1d105aece6cb5d054dbd3f08696ca40d49","shortMessageHtmlLink":"Relax OSS/.pre-commit-config.yaml (#1511)"}},{"before":"cfc81aac1bd1e9b2014df5b0ebe0e4cfc57a9150","after":"44cf8248c6650217b9c665c2379305c019b754ff","ref":"refs/heads/sync-with-pro","pushedAt":"2024-05-14T16:25:25.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"IagoAbal","name":"Iago Abal","path":"/IagoAbal","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/5313615?s=80&v=4"},"commit":{"message":"Do not ignore OSS/ anymore in precommit (#1509)\n\ntest plan:\nmodify OSS/src/main/Main.ml indentation and run\npre-commit run -a\n=> now it fixes the file\n\nsynced from 0fb525f415fcc7bfe13cda0e0c0b9b1bd86c090b","shortMessageHtmlLink":"Do not ignore OSS/ anymore in precommit (#1509)"}},{"before":null,"after":"cfc81aac1bd1e9b2014df5b0ebe0e4cfc57a9150","ref":"refs/heads/sync-with-pro","pushedAt":"2024-05-14T13:23:55.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"IagoAbal","name":"Iago Abal","path":"/IagoAbal","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/5313615?s=80&v=4"},"commit":{"message":"ci: pro-benchmark-testing: Rename semgrep -> OSS (#1505)\n\nDuring the merge of Pro+OSS we renamed `semgrep/` to `OSS/` and that\nbroke the benchmarks.\n\nHad to remove an expected finding in _aws-doc-sdk-examples_: \n\n Error running benchmark semgrep.bench.aws-doc-sdk-examples\n Missing 1 findings:\n{\"check_id\":\n\"OSS.perf.bench.rules_cache.aws-doc-sdk-examples.tainted-sql-string\",\n\"end\": {\"col\": 243, \"line\": 57, \"offset\": 2421}, \"extra\": \"\", \"path\": \"/OSS/perf/bench/aws-doc-sdk-examples/input/aws-doc-sdk-examples.git/javav2/usecases/CreatingSpringRedshiftRest/src/main/java/com/aws/rest/InjectWorkService.java\",\n\"start\": {\"col\": 35, \"line\": 57, \"offset\": 2213}}\n\nI tried reproducing this with a pre-merge version (but using directly\n_semgrep-core-proprietary_) and I could not get that finding either.\n\nAlso deleted some files that referred to Emma's HOME folder which I'm\nassuming should not have been committed.\n\ntest plan:\nCI\n\nsynced from f089de8d20f6143034fe5a63a3b81649ab490317","shortMessageHtmlLink":"ci: pro-benchmark-testing: Rename semgrep -> OSS (#1505)"}},{"before":"ae556770bb9bfd45f6f9cf4eebbccaaa38b1a7f8","after":"e6f0de6c44979114ed2a1a8b6eee597167982368","ref":"refs/heads/iago/taint-shapes","pushedAt":"2024-05-14T09:06:43.000Z","pushType":"push","commitsCount":3,"pusher":{"login":"IagoAbal","name":"Iago Abal","path":"/IagoAbal","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/5313615?s=80&v=4"},"commit":{"message":"WIP fixes (need smaller test)","shortMessageHtmlLink":"WIP fixes (need smaller test)"}},{"before":"f34c6b09807a561f4caff2e1c4446549fa5826ca","after":"e693af7ee026d314b3aa9ffe8852de80ac4e25ba","ref":"refs/heads/martin/update-dockerfile-parser","pushedAt":"2024-05-14T02:39:19.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"mjambon","name":"Martin Jambon","path":"/mjambon","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/343265?s=80&v=4"},"commit":{"message":"Make '-show_ast_json' and '-dump_tree_sitter_cst' work for lang=dockerfile","shortMessageHtmlLink":"Make '-show_ast_json' and '-dump_tree_sitter_cst' work for lang=docke…"}},{"before":"de1d2ad4713b28051dbe9a3f009121eb5d202ae7","after":"f34c6b09807a561f4caff2e1c4446549fa5826ca","ref":"refs/heads/martin/update-dockerfile-parser","pushedAt":"2024-05-14T00:23:05.000Z","pushType":"push","commitsCount":9,"pusher":{"login":"mjambon","name":"Martin Jambon","path":"/mjambon","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/343265?s=80&v=4"},"commit":{"message":"Cleanup","shortMessageHtmlLink":"Cleanup"}},{"before":"bd380131bec41e0dc640387253c56b950b132cc8","after":"de1d2ad4713b28051dbe9a3f009121eb5d202ae7","ref":"refs/heads/martin/update-dockerfile-parser","pushedAt":"2024-05-14T00:07:26.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"mjambon","name":"Martin Jambon","path":"/mjambon","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/343265?s=80&v=4"},"commit":{"message":"Change translation of LABEL and ENV instructions, converting them into\nas many statements as there are key/value pairs. This accommodates keys\nwhich may now include variables.","shortMessageHtmlLink":"Change translation of LABEL and ENV instructions, converting them into"}},{"before":null,"after":"8e23f025f245d817ce6a84863eff42d0cc35f210","ref":"refs/heads/update-semgrep-rules-9071468581-1","pushedAt":"2024-05-14T00:02:37.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"semgrep-ci[bot]","name":null,"path":"/apps/semgrep-ci","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/29760937?s=80&v=4"},"commit":{"message":"update semgrep rules","shortMessageHtmlLink":"update semgrep rules"}},{"before":"5891c7a31238a853fab2bc3a8c369e2437355ff7","after":"f56d8bde56a953e44406942fdf88ad94db538740","ref":"refs/heads/develop","pushedAt":"2024-05-13T15:04:18.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"aryx","name":"Yoann Padioleau","path":"/aryx","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/332336?s=80&v=4"},"commit":{"message":"fourth try\n\ntest plan:\nsync_repos\n\nsynced from 78299ac3a15dc73013158051dffed0378a8ee11b","shortMessageHtmlLink":"fourth try"}},{"before":"2d88897518ce854d2272f013d37b992ebac326e3","after":"5891c7a31238a853fab2bc3a8c369e2437355ff7","ref":"refs/heads/develop","pushedAt":"2024-05-13T15:01:05.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"aryx","name":"Yoann Padioleau","path":"/aryx","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/332336?s=80&v=4"},"commit":{"message":"manual sync point\n\nsynced from cd44981a0865f400d9eccdf1e7f1943a1f2b5661","shortMessageHtmlLink":"manual sync point"}}],"hasNextPage":true,"hasPreviousPage":false,"activityType":"all","actor":null,"timePeriod":"all","sort":"DESC","perPage":30,"cursor":"djE6ks8AAAAESxQ4ZwA","startCursor":null,"endCursor":null}},"title":"Activity · semgrep/semgrep"}