You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
fix: not recommended patterns are now included in semgrep config CF-1…
…809 (#175)
* fix: not recommended patterns are now included in semgrep config CF-1809
* fix: semgrep rules updated CF-1809
fix toolname comparison during the analysis (#172)
* in analyse.go we now compare the tool name with the shortName (i.e. pmd 7.16.0 should be pmd-7 instead of pmd, which is version 6)
* we now translate the name of pmd according to the tool, the same as eslint: pmd 7.16.0 should be called as pmd-7 and pmd 6.55.0 should be called pmd
feature: Upload sourceId when available from SARIF CF-1813 (#173)
* feature: Upload sourceId when available from SARIF CF-1813
Note that this will upload it for all the tools and affect the
UUID generation, thus marking current issues as fixed/new
To have this feature only for some tools this is not enough
* feature: Only send sourceId for Trivy CF-1813
This will avoid messing with the results from other tools and
respectes on how codacy cloud and the CLI v1 handles it.
The downside is that will be a bit error prone when adding other tools
and if forget to add it, less results will be added on Codacy,
but for now it is an acceptable compromise
fix: listing tools and patterns should allow disabled ones too (#170)
* fix: listing tools and patterns should allow disabled ones too
* bumplizard and trivy versions on codacy.yaml