Create semgrep for sast

[rparchuri]

testing static security analysis tool in github for future testing

[coveralls]

Coverage remained the same at 59.311% when pulling 45c7bb6 on rparchuri-patch-2 into 7f600ea on master.

[rparchuri]

@oshi97 can you help with the review here? Let me know if you have any questions.

[tmeyer2115]

@oshi97 can you help with the review here? Let me know if you have any questions.

Can you please provide some context on this change? Is this a Vaccine driven initiative? What does Semgrep do exactly? We don't typically merge things directly into master. We use the GitFlow process.

[rparchuri]

Semgrep is a static analysis security testing scanner, and I plan to do a POV to see how we can perform these scans during the PRs. Currently, I am only targeting this repo, but in the future, intention is to extend this scanner to all the other repos. What and where is the best way to merge this change? For context, this change is a part of the Security Office initiative where Vaccine is one of the teams under SO. Let me know if you have any questions. ./rohit ------------- [image: Logo] *Rohit Parchuri* *CISO, Yext* *M/T: (773) 870-1467*

…

On Thu, Sep 2, 2021 at 6:38 AM Tom Meyer ***@***.***> wrote: @oshi97 <https://github.com/oshi97> can you help with the review here? Let me know if you have any questions. Can you please provide some context on this change? Is this a Vaccine driven initiative? What does Semgrep do exactly? We don't typically merge things directly into master. We use the GitFlow process. — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub <#1546 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AU2K6Q5WMOEEO5EXW5CLZSTT7544RANCNFSM5DHO4LYA> . Triage notifications on the go with GitHub Mobile for iOS <https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675> or Android <https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub>.