Commits

Commits on Mar 31, 2025

Remove Nested nthChild and if_statement Conditions and Rule Comments (#196)

ESS-ENN
and
Sakshis
authored
Add static analysis rules for detecting TOCTOU race conditions in C/C++ (#192)

ESS-ENN
and
Sakshis
authored
Add C# JWT rules: enforce token verification and no hardcoded secrets (#195)

ESS-ENN
and
Sakshis
authored
Add C# Security Rule for Detecting Insecure ECB Encryption Mode (#194)

ESS-ENN
and
Sakshis
authored
Add Security Rules for TOCTOU Race Conditions in C/C++ File Operations (#193)

ESS-ENN
and
Sakshis
authored
Add AST rules for detecting world-writable file creation in C/C++ (#191)

ESS-ENN
and
Sakshis
authored
Remove YAML files for HKDF, PKCS5, Scrypt, and webview rules and tests (#190)

ESS-ENN
and
Sakshis
authored

Commits on Mar 28, 2025

Add Swift YAML rules for HKDF, PKCS5, Scrypt; update test configs (#188)

ESS-ENN
and
Sakshis
authored
Add Swift UIWebView nil baseURL detection rule and update snapshots (#189)

ESS-ENN
and
Sakshis
authored

Commits on Mar 27, 2025

Update YAML rule for $APP.UseDeveloperExceptionPage and snapshot file
ESS-ENN
authored

Commits on Mar 26, 2025

Add YAML-based AST security rules and tests for C#, Java, Ruby (#186)

ESS-ENN
and
Sakshis
authored
Add YAML security rules and tests for hard-coded secret detection (#185)

ESS-ENN
and
Sakshis
authored
Add Java security rules for missing HttpOnly and Secure cookie flags (#184)

ESS-ENN
and
Sakshis
authored
Add C++ security rules for NUL terminators and string_view safety (#183)

ESS-ENN
and
Sakshis
authored
Add YAML rules and tests for insecure JWT usage detection (#182)

ESS-ENN
and
Sakshis
authored
Add Python MySQL client security analysis rules and tests (#181)

ESS-ENN
and
Sakshis
authored

Commits on Mar 24, 2025

Commits on Mar 21, 2025

Remove obsolete C rule; add C++ static check for UAF and vector issues (#177)

ESS-ENN
and
Sakshis
authored

Commits on Mar 20, 2025

@coderabbitai (#176)

ESS-ENN
and
Sakshis
authored

Commits on Mar 12, 2025

Add security rules to detect hard-coded credentials in Java (#174)

ESS-ENN
and
Sakshis
authored
Add Java rules for detecting hardcoded secrets in System.setProperty and OkHttp (#175)

ESS-ENN
and
Sakshis
authored
Add security rules for SHA-1, AES-ECB, and Blowfish in Java (#173)

ESS-ENN
and
Sakshis
authored
Add new Rust security rules for sqlx and reqwest credential detection (#172)

ESS-ENN
and
Sakshis
authored

Commits on Mar 10, 2025

Remove LDAP3 and Express JWT Security Rules and Test Snapshots (#171)

ESS-ENN
and
Sakshis
authored

Commits on Mar 7, 2025

Add YAML security rules for static AES-CBC IV and debug logging in PHP (#170)

ESS-ENN
and
Sakshis
authored
Add YAML security rules and tests for insecure secret usage (#169)

ESS-ENN
and
Sakshis
authored
Add YAML configs and tests for hard-coded secrets and empty passwords (#168)

ESS-ENN
and
Sakshis
authored
Add Swift rules and tests for hard-coded encryption secrets (#167)

ESS-ENN
and
Sakshis
authored

Commits on Mar 4, 2025

Add YAML security rules for DocumentBuilderFactory external entities (#163)

ESS-ENN
and
Sakshis
authored
Add mysql2 security rules for empty passwords and hard-coded secrets (#166)

ESS-ENN
and
Sakshis
authored
Add YAML security rules and tests for tormysql empty/hardcoded creds (#165)

ESS-ENN
and
Sakshis
authored
Add security rules for empty and hard-coded OpenAI secrets (#164)

ESS-ENN
and
Sakshis
authored

Commits on Mar 3, 2025

Add YAML rules and tests for detecting hard-coded secrets in C# (#161)

ESS-ENN
and
Sakshis
authored