Commit Graph
5 Commits
Author SHA1 Message Date
aditya2548 f8363dd06e [COMPLIANCE] Update Copyright & License Headers 2026-04-06 15:48:57 +05:30
Justin Nguyen 8f8a0cef16 [COMPLIANCE] Update Copyright and License Headers (#6400) 2026-02-03 15:12:00 -06:00
Abhishek Manjegowda 81c9ef0204 SemGrep rule to identify direct uses of crypto/rand.Reader and recommend the use of the SecureRandomReader instead (#6330)
* semgrep rules for crypto/rand added

* error fixed

* semgrep rules for crypto/rand added

* error fixed

* requested changes updated

* requested changes added

* Ent exclude files added
2026-01-30 11:17:07 +05:30
429247f407 [COMPLIANCE] Update Copyright Headers (#6282)
* [COMPLIANCE] Update Copyright and License Headers

* chore: make gen to generate files with copyright headers

* chore: update missed copyright headers

---------

Co-authored-by: hashicorp-copywrite[bot] <110428419+hashicorp-copywrite[bot]@users.noreply.github.com>
Co-authored-by: Justin Nguyen <justin.nguyen@hashicorp.com>
2026-01-28 11:05:07 -06:00
Johan Brandhorst-Satzkorn 0ef88d0f05 Add semgrep rules (#5042)
* Add semgrep rules

Instrument our security scanner with the ability to use custom semgrep
rules. This is inspired by the HVS teams use of semgrep.

* semgrep: add rule to detect string interpolation in WithInfoMsg

The event.WithInfoMsg function expects a set of key value tuples,
but it can easily be misunderstood to accept string interpolation
arguments. This check will error if any string interpolation verbs are
used in calls to event.WithInfoMsg
2024-09-23 10:07:57 -07:00