This is the additional semgrep rules used in dicoding codebase. This rules reflect the ongoing continuous security research conducted in dicoding.
Make sure you have semgrep installed.
The easiest way is to install it via pip
# macOS, Linux, or Windows Subsystem for Linux (WSL) users
python3 -m pip install semgrep
and then after that just run make to run the test.
If you would like to scan your code, you just need to pass in the path of this folder to semgrep.
For example:
semgrep scan --config /path/to/this/local/repo