/semgrep-rules

Low Noise Semgrep Security Rules

Primary LanguageSolidity

🥷✨ Low Noise Semgrep Security Rules

Rules:

  • ✅ Security relevant patterns only
  • ❌ No performance, micro optimizations and other noise

Rulesets:

  • Solidity
  • MetaMask Snaps - Hover Info

⇒ rules - 👈🚀 Is the active ruleset. Be smart, use this ☝️
⇒ _dev - 🧑‍🔬💥 Experimental rules. Would not use.

✨ Integrations

CLI

tintin@:~/workspace/solidity/project-under-audit|⇒  semgrep --exclude="**mock**,**test**" --severity=WARNING --severity=ERROR -c /path_to_this_repo/rules .

VSCode

main-vs-code-video.mp4
  1. install https://marketplace.visualstudio.com/items?itemName=Semgrep.semgrep
  2. configure:
    1. semgrep.scan.exclude 👉 **/node_modules/**, **test**, **mock**
    2. semgrep.scan.configuration 👉 auto, /path_to_this_repo/rules

⭐ Credits

Contribute, share! 🤗❤️