Add semgrep rules

resonatehq · Aug 31, 2023 · 91e458e · 91e458e
1 parent 5c73832
commit 91e458e
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 1 deletion.
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
@@ -41,7 +41,7 @@ jobs:
         token: ${{ secrets.CODECOV_TOKEN }}
 
   semgrep:
-    name: semgrep/ci
+    name: semgrep
     runs-on: ubuntu-20.04
     env:
       SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }}

diff --git a/semgrep.yml b/semgrep.yml
@@ -0,0 +1,11 @@
+rules:
+- id: range-over-map
+  pattern-either:
+  - pattern: |
+      for $K, $V := range ($MAP : map[$KT]$VT) { ... }
+  - pattern: |
+      for $K := range ($MAP : map[$KT]$VT) { ... }
+  message: Ranging over a map is non deterministic
+  languages:
+  - go
+  severity: ERROR