Skip to content
This repository has been archived by the owner on Apr 9, 2024. It is now read-only.

Add exclude option in the Semgrep action yml file #660

Open
matthernet opened this issue Nov 7, 2022 · 2 comments
Open

Add exclude option in the Semgrep action yml file #660

matthernet opened this issue Nov 7, 2022 · 2 comments

Comments

@matthernet
Copy link

matthernet commented Nov 7, 2022

Is your feature request related to a problem? Please describe
Hi, I want to use a specific ruleset but also I would need to exclude one particular rule since I'm working on some test, I know that the option was added HERE for the CLI, but there is an option for the docker in GH actions?

Describe the solution you'd like
For example something like these where you are able to add the name (or names separated by , ) and Semgrep will use all the rules from the ruleset except the ones detailed

jobs:
  semgrep:
    name: Semgrep Scan
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3
      - uses: returntocorp/semgrep-action@v1
        with:
          config:
            p/owasp-top-ten --exclude csharp.dotnet.security.audit.missing-or-broken-authorization.missing-or-broken-authorization
@maipbui
Copy link

maipbui commented Nov 9, 2022

Same as @matthernet. I'd love to have this feature.

@matthernet
Copy link
Author

Hi! any update regarding this request? it would be VERY VERY useful to avoid false positives in the CI/CD

.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Development

No branches or pull requests

2 participants