static-analysis

App Attest allows your app to attach a hardware-backed assertion as a part of the request. Your server can use assertion to verify the request came from your genuine app, on a genuine Apple device.

Describe the bug

I expect metavariables between backticks to work in JavaScript:

$ semgrep --lang js -e '`$A`'
ran 1 rules on 1 files: 0 findings

I expect this to match the following:

`test`;

Priority
How important is this to you?

P2: annoying but not blocking me

https://psalm.dev/r/fb4e03dccd

✔️ Case 1 – `string` input

INFO: Trace - $case1: false|string

Return type false|string – everthing as expected, ok.

❌ Case 2 – `array<int, string>` input

INFO: Trace - $case2: array<int, string>

Return type array<int, string> – don’t know how to force some error to test and didn’t found out by looking at the PHP

Many repositories need to fix, so please help if you like.

If you could help, it would be helpful if you could comment before starting the work not to overlapping.

Fix example

Run exit command after lint.

echo '::group:: Running golangci-lint with reviewdog 🐶 ...'
go

Expected Behavior of the rule

The empty else block is reported:

                fun f() {
                    var i = 0
                    if (i == 0) {
                        println(i)
                    } else {
                        
                    }
                }

Context

EmptyIfBlock is only reporting empty then blocks, not empty else b

Oct	NOV	Dec
	13
2020	2021	2022

static-analysis

Here are 1,270 public repositories matching this topic...

koalaman / shellcheck

realm / SwiftLint

nikic / PHP-Parser

facebook / infer

Konloch / bytecode-viewer

FriendsOfPHP / PHP-CS-Fixer

phpstan / phpstan

MobSF / Mobile-Security-Framework-MobSF

analysis-tools-dev / static-analysis

squizlabs / PHP_CodeSniffer

quay / clair

OWASP / owasp-mstg

rshipp / awesome-malware-analysis

ttroy50 / cmake-examples

checkstyle / checkstyle

SonarSource / sonarqube

presidentbeef / brakeman

hadolint / hadolint

palantir / tslint

google / error-prone

facebook / pyre-check

securego / gosec

returntocorp / semgrep

phan / phan

davidhalter / jedi

vimeo / psalm

✔️ Case 1 – string input

❌ Case 2 – array<int, string> input

reviewdog / reviewdog

Fix example

dominikh / go-tools

rrrene / credo

detekt / detekt

Expected Behavior of the rule

Context

Improve this page

Add this topic to your repo

✔️ Case 1 – `string` input

❌ Case 2 – `array<int, string>` input