Merge branch 'develop' into merge-gitleaks-to-develop

semgrep · Jun 18, 2024 · 3e72c3b · 3e72c3b
2 parents ae48945 + 94b11a2
commit 3e72c3b
Show file tree

Hide file tree

Showing 4 changed files with 17 additions and 4 deletions.
diff --git a/Pipfile.lock b/Pipfile.lock
diff --git a/go/lang/security/audit/crypto/math_random.fixed.go b/go/lang/security/audit/crypto/math_random.fixed.go
@@ -4,6 +4,12 @@ import (
 	"crypto/rand"
 	// ruleid: math-random-used
 	mrand "crypto/rand"
+	// ruleid: math-random-used
+	mrand "crypto/rand"
+	// ruleid: math-random-used
+	mrand "crypto/rand"
+	// ok: math-random-used
+	mrand "math/rand/something"
 )
 
 func main() {

diff --git a/go/lang/security/audit/crypto/math_random.go b/go/lang/security/audit/crypto/math_random.go
@@ -4,6 +4,12 @@ import (
 	"crypto/rand"
 	// ruleid: math-random-used
 	mrand "math/rand"
+	// ruleid: math-random-used
+	mrand "math/rand/v2"
+	// ruleid: math-random-used
+	mrand "math/rand/v222"
+	// ok: math-random-used
+	mrand "math/rand/something"
 )
 
 func main() {

diff --git a/go/lang/security/audit/crypto/math_random.yaml b/go/lang/security/audit/crypto/math_random.yaml
@@ -26,7 +26,7 @@ rules:
           import "$MATH"
     - metavariable-regex:
         metavariable: $MATH
-        regex: ^(math/rand)$
+        regex: ^(math/rand(\/v[0-9]+)*)$
     - pattern-either:
         - pattern-inside: |
             ...