OWASP-Benchmark/BenchmarkJava

Trying to create scorecard for Semgrep results but I get empty FluidAttacks scorecard

Closed this issue · 4 comments

Hi, I have run Semgrep against the benchmark using the scripts/runSemgrep.sh script; it works and produces an output json file in results folder. However, when I run the createScorecards.sh script, I am getting in the scorecard folder files named "Scorecard_for_FluidAttacks" and the scores are always 0. Obviously I don't have any FluidAttacks results, and the only results file in the results folder is the Semgrep one.
Anyone could please help me?

What version of Semgrep did you use to generate the report?

Edit: I just checked, it really detects Semgrep as FluidAttacks. Will try to fix it today!

Hi @darkspirit510, I don't understand: is it fixed now? How can I get the fixed version?

Hi @simonevallifuoco,

yes, it is fixed. Please pull BenchmarkUtils and run createScorecards.sh again.

Sascha

Thank you @darkspirit510, it worked!