mirror of
https://github.com/zulip/zulip.git
synced 2025-10-23 04:52:12 +00:00
semgrep: Use upstream options for silencing extra messages.
Signed-off-by: Anders Kaseorg <anders@zulip.com>
This commit is contained in:
committed by
Tim Abbott
parent
d35b5027bb
commit
9d768b79c5
@@ -1,7 +1,7 @@
|
||||
#!/usr/bin/env python3
|
||||
import argparse
|
||||
import os
|
||||
import re
|
||||
import random
|
||||
import sys
|
||||
|
||||
# check for the venv
|
||||
@@ -9,8 +9,6 @@ from lib import sanity_check
|
||||
|
||||
sanity_check.check_venv(__file__)
|
||||
|
||||
import random
|
||||
|
||||
from zulint.command import LinterConfig, add_default_linter_arguments
|
||||
|
||||
from linter_lib.custom_check import non_py_rules, python_rules
|
||||
@@ -101,6 +99,7 @@ def run() -> None:
|
||||
suppress_line=lambda line: line in ["Checking formatting...\n", "All matched files use Prettier code style!\n"])
|
||||
|
||||
semgrep_command = ["semgrep", "--config=./tools/semgrep.yml", "--error",
|
||||
"--disable-version-check", "--quiet",
|
||||
# This option is dangerous in the context of running
|
||||
# semgrep-as-a-service on untrusted user code, since it
|
||||
# causes Python code in the rules configuration to be
|
||||
@@ -113,9 +112,7 @@ def run() -> None:
|
||||
linter_config.external_linter('semgrep-py', [*semgrep_command, "--lang=python"], ['py'],
|
||||
fix_arg='--autofix',
|
||||
description="Syntactic Grep (semgrep) Code Search Tool "
|
||||
"(config: ./tools/semgrep.yml)",
|
||||
# https://github.com/returntocorp/semgrep/issues/1228
|
||||
suppress_line=lambda line: bool(re.match(r"running \d+ rules\.\.\.$", line)))
|
||||
"(config: ./tools/semgrep.yml)")
|
||||
|
||||
linter_config.external_linter('thirdparty', ['tools/check-thirdparty'],
|
||||
description="Check docs/THIRDPARTY copyright file syntax")
|
||||
|
Reference in New Issue
Block a user