Skip to content
Snippets Groups Projects
Commit 4c4ff82c authored by Pierre Smeyers's avatar Pierre Smeyers
Browse files

Merge branch '38-fail-semgrep-if-errors-are-found-in-the-rulesets' into 'master'

Resolve "Fail semgrep if errors are found in the rulesets"

Closes #38

See merge request to-be-continuous/node!68
parents 313df358 a7df3962
Branches
No related tags found
No related merge requests found
...@@ -361,7 +361,7 @@ It is bound to the `test` stage, and uses the following variables: ...@@ -361,7 +361,7 @@ It is bound to the `test` stage, and uses the following variables:
| ----------------------- | -------------------------------------- | ----------------- | | ----------------------- | -------------------------------------- | ----------------- |
| `semgrep-disabled` / `NODE_SEMGREP_DISABLED` | Set to `true` to disable this job | _none_ | | `semgrep-disabled` / `NODE_SEMGREP_DISABLED` | Set to `true` to disable this job | _none_ |
| `semgrep-image` / `NODE_SEMGREP_IMAGE` | The Docker image used to run [Semgrep](https://semgrep.dev/docs/) | `registry.hub.docker.com/semgrep/semgrep:latest` | | `semgrep-image` / `NODE_SEMGREP_IMAGE` | The Docker image used to run [Semgrep](https://semgrep.dev/docs/) | `registry.hub.docker.com/semgrep/semgrep:latest` |
| `semgrep-args` / `NODE_SEMGREP_ARGS` | Semgrep [scan options](https://semgrep.dev/docs/cli-reference#semgrep-scan-command-options) | `--metrics off --disable-version-check` | | `semgrep-args` / `NODE_SEMGREP_ARGS` | Semgrep [scan options](https://semgrep.dev/docs/cli-reference#semgrep-scan-command-options) | `--metrics off --disable-version-check --no-suppress-errors` |
| `semgrep-rules` / `NODE_SEMGREP_RULES` | Space-separated list of [Semgrep rules](https://semgrep.dev/docs/running-rules).<br/>Can be both local YAML files or remote rules from the [Semgrep Registry](https://semgrep.dev/explore) (denoted by the `p/` prefix). | `p/javascript p/eslint p/gitlab-eslint` | | `semgrep-rules` / `NODE_SEMGREP_RULES` | Space-separated list of [Semgrep rules](https://semgrep.dev/docs/running-rules).<br/>Can be both local YAML files or remote rules from the [Semgrep Registry](https://semgrep.dev/explore) (denoted by the `p/` prefix). | `p/javascript p/eslint p/gitlab-eslint` |
| `semgrep-download-rules-enabled` / `NODE_SEMGREP_DOWNLOAD_RULES_ENABLED` | Download Semgrep remote rules | `true` | | `semgrep-download-rules-enabled` / `NODE_SEMGREP_DOWNLOAD_RULES_ENABLED` | Download Semgrep remote rules | `true` |
......
...@@ -121,7 +121,7 @@ ...@@ -121,7 +121,7 @@
{ {
"name": "NODE_SEMGREP_ARGS", "name": "NODE_SEMGREP_ARGS",
"description": "Semgrep [scan options](https://semgrep.dev/docs/cli-reference#semgrep-scan-command-options)", "description": "Semgrep [scan options](https://semgrep.dev/docs/cli-reference#semgrep-scan-command-options)",
"default": "--metrics off --disable-version-check" "default": "--metrics off --disable-version-check --no-suppress-errors"
}, },
{ {
"name": "NODE_SEMGREP_RULES", "name": "NODE_SEMGREP_RULES",
......
...@@ -77,7 +77,7 @@ spec: ...@@ -77,7 +77,7 @@ spec:
default: false default: false
semgrep-args: semgrep-args:
description: Semgrep [scan options](https://semgrep.dev/docs/cli-reference#semgrep-scan-command-options) description: Semgrep [scan options](https://semgrep.dev/docs/cli-reference#semgrep-scan-command-options)
default: --metrics off --disable-version-check default: --metrics off --disable-version-check --no-suppress-errors
semgrep-rules: semgrep-rules:
description: |- description: |-
Space-separated list of [Semgrep rules](https://semgrep.dev/docs/running-rules). Space-separated list of [Semgrep rules](https://semgrep.dev/docs/running-rules).
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment