Skip to content

[SCB-Bot] Upgraded semgrep from 0.85.0 to 0.92.0 #1127

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
J12934 merged 7 commits into from
May 12, 2022
Merged

[SCB-Bot] Upgraded semgrep from 0.85.0 to 0.92.0 #1127

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
7 commits
Select commit Hold shift + click to select a range
7ae86d3
Upgrading semgrep from 0.85.0 to 0.89.0
secureCodeBoxBot Apr 21, 2022
dca89d7
Allow semgrep to run as root
malexmave Apr 21, 2022
615274d
Remove now-unnecessary workaround for semgrep bug
malexmave Apr 21, 2022
d5a7271
Upgrade semgrep to 0.90.0
malexmave Apr 27, 2022
cad7a72
Upgrade semgrep to 0.91.0
malexmave May 4, 2022
b9330ce
Upgrade semgrep to 0.92.0
malexmave May 12, 2022
e999efb
Updating Helm Docs
malexmave May 12, 2022
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion scanners/semgrep/Chart.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -18,7 +18,7 @@ version: "v3.1.0-alpha1"
# incremented each time you make changes to the application. Versions are not expected to
# follow Semantic Versioning. They should reflect the version the application is using.
# It is recommended to use it with quotes.
appVersion: "0.85.0"
appVersion: "0.92.0"
annotations:
versionApi: https://api.github.com/repos/returntocorp/semgrep/releases/latest
kubeVersion: ">=v1.11.0-0"
Expand Down
4 changes: 2 additions & 2 deletions scanners/semgrep/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@ title: "Semgrep"
category: "scanner"
type: "Repository"
state: "released"
appVersion: "0.85.0"
appVersion: "0.92.0"
usecase: "Static Code Analysis"
---

Expand Down Expand Up @@ -195,7 +195,7 @@ Kubernetes: `>=v1.11.0-0`
| scanner.securityContext.capabilities.drop[0] | string | `"all"` | |
| scanner.securityContext.privileged | bool | `false` | |
| scanner.securityContext.readOnlyRootFilesystem | bool | `false` | |
| scanner.securityContext.runAsNonRoot | bool | `true` | |
| scanner.securityContext.runAsNonRoot | bool | `false` | |
| scanner.tolerations | list | `[]` | Optional tolerations settings that control how the scanner job is scheduled (see: https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration/) |
| scanner.ttlSecondsAfterFinished | string | `nil` | |

Expand Down
2 changes: 1 addition & 1 deletion scanners/semgrep/docs/README.ArtifactHub.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -200,7 +200,7 @@ Kubernetes: `>=v1.11.0-0`
| scanner.securityContext.capabilities.drop[0] | string | `"all"` | |
| scanner.securityContext.privileged | bool | `false` | |
| scanner.securityContext.readOnlyRootFilesystem | bool | `false` | |
| scanner.securityContext.runAsNonRoot | bool | `true` | |
| scanner.securityContext.runAsNonRoot | bool | `false` | |
| scanner.tolerations | list | `[]` | Optional tolerations settings that control how the scanner job is scheduled (see: https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration/) |
| scanner.ttlSecondsAfterFinished | string | `nil` | |

Expand Down
2 changes: 1 addition & 1 deletion scanners/semgrep/docs/README.DockerHub-Parser.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -42,7 +42,7 @@ You can find resources to help you get started on our [documentation website](ht

## Supported Tags
- `latest` (represents the latest stable release build)
- tagged releases, e.g. `0.85.0`
- tagged releases, e.g. `0.92.0`

## How to use this image
This `parser` image is intended to work in combination with the corresponding security scanner docker image to parse the `findings` results. For more information details please take a look at the documentation page: https://docs.securecodebox.io/docs/scanners/semgrep.
Expand Down
8 changes: 0 additions & 8 deletions scanners/semgrep/integration-tests/semgrep.test.js
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -15,14 +15,6 @@ test(
[
"-c",
"p/ci",
// Exclude subfolders beginning with .. to work around a strange
// interaction between Kubernetes and Semgrep: Kubernetes stores
// ConfigMap files in a hidden subdirectory and links to them.
// This leads to the file being found twice by semgrep. We thus
// exclude the relevant subdirectory from the integration test
// scans to avoid getting double the number of matches.
"--exclude",
"..*",
"/test/",
],
90,
Expand Down
2 changes: 1 addition & 1 deletion scanners/semgrep/values.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -44,7 +44,7 @@ scanner:
extraContainers: []

securityContext:
runAsNonRoot: true
runAsNonRoot: false
readOnlyRootFilesystem: false
allowPrivilegeEscalation: false
privileged: false
Expand Down