-
Updated
Feb 14, 2022 - JavaScript
static-code-analysis
Here are 425 public repositories matching this topic...
-
Updated
Feb 20, 2022 - JavaScript
-
Updated
Feb 18, 2022 - OCaml
-
Updated
Feb 15, 2022 - Nunjucks
-
Updated
Feb 20, 2022 - Rust
-
Updated
Feb 20, 2022 - Java
Is your feature request related to a problem? Please describe.
The problem is that there are awesome people out there who don't yet work at r2c.
Describe the solution you'd like
A simple implementation might just hit the Lever API and display our currently live list of jobs and a link to them, e.g:
We love that you're using Semgrep would
-
Updated
Feb 16, 2022 - Go
Describe the solution you'd like
Move the fixtures folder to outside internal and place it under root as a “sibling” to internal, pkg, cmd and the rest. The reason why is because internal/ is a special directory name recognized by the go tool which will prevent one package from being imported by another unless both share a common ancestor.
Requirements
Golang basic level.
-
Updated
Feb 13, 2022 - PHP
Many repositories need to fix, so please help if you like.
If you could help, it would be helpful if you could comment before starting the work not to overlapping.
Fix example
Run exit command after lint.
echo '::group:: Running golangci-lint with reviewdog 🐶 ...'
goDescribe the bug
In the docs found here:
https://bandit.readthedocs.io/en/latest/plugins/index.html#complete-test-plugin-listing
B109 and B111 show a description instead of a plugin name. This looks inconsistent since all the other plugin names are listed. I believe this is a result of a recent change to remove these deprecated plugins.
To Reproduce
- Navigate to https://bandit
Current problem
The SEO for individual message start to take effects :
Result:
But we lack some information to easily navigate. The information I
Affects PMD Version:
6.17
Rule:
All rulesets.
Description:
PMD output does not inform the user as to the number of rules contravened while running the tool. The user has to look at the output file.
Code Sample demonstrating the issue:
Sep 01, 2019 9:42:45 AM net.sourceforge.pmd.cache.FileAnalysisCache loadFromFile
INFO: Analysis cache loaded
Sep 01, 2019 9:
Is your feature request related to a problem? Please describe.
It would be nice that imports-blacklist rule supports regex or match any sub-packages.
Describe the solution you'd like
adding
[rule.imports-blacklist]
arguments = ["github.com/pkgA/pkgB", "github.com/pkg1/**/pkg2"]
configuration would prevent following imports:
import "github.com/pkgA/pkgB"
import "github.com/pkgA
This would allow for more localized suppressions. Say we have a method foo(Object o) in an annotated third-party library where o has no type annotation, but o really should be @Nullable, as foo() can handle being passed null as a parameter. In code checked by NullAway, say you write:
void bigMethod() {
...
foo(null); // NullAway reports an error
...
}I beli
[spotbugs] Running SpotBugs...
[spotbugs] Unexpected problem occured during version sanity check
[spotbugs] Reported exception:
[spotbugs] java.lang.AbstractMethodError: Receiver class org.slf4j.nop.NOPServiceProvider does not define or inherit an implementation of the resolved method 'abstract java.lang.String getRequesteApiVersion()' of interface org.slf4j.
-
Updated
Feb 11, 2022 - TypeScript
-
Updated
Feb 18, 2022 - Ruby
-
Updated
Jan 31, 2022 - JavaScript
I wrote some of the code to do this in a branch https://github.com/python-security/pyt/compare/class_based_views, but since I'm working on other things and this feature seems cool and important I'm making this issue
Let me know if you would like any help in implementing.
-
Updated
Jan 26, 2022 - Go
-
Updated
Feb 10, 2022 - Python
-
Updated
Feb 14, 2022 - Ruby
-
Updated
Feb 18, 2022 - Go
Rubberduck version information
The info below can be copy-paste-completed from the first lines of Rubberduck's log or the About box:
Rubberduck version [Version 2.5.2.6030
OS: Microsoft Windows NT 10.0.22000.0, x64
Host Product: Microsoft Office x64
Host Version: 16.0.14701.20226
Host Executable: WINWORD.EXE
Description
Language inspection for assignment of LCase suggests usi
-
Updated
Jan 20, 2022 - C++
-
Updated
Feb 7, 2022 - Java
Improve this page
Add a description, image, and links to the static-code-analysis topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the static-code-analysis topic, visit your repo's landing page and select "manage topics."



alloranyso it's obvious that I want to fail on anythingbecause someone reading
--fail-level Aneeds to read up on what that means whereas `--fail-level an