tintinweb / semgrep-rules

Low Noise Semgrep Security Rules

🥷✨ Low Noise Semgrep Security Rules

Rules:

• ✅ Security relevant patterns only
• ❌ No performance, micro optimizations and other noise

Rulesets:

• Solidity
• MetaMask Snaps - Hover Info

⇒ rules - 👈🚀 Is the active ruleset. Be smart, use this ☝️
⇒ _dev - 🧑‍🔬💥 Experimental rules. Would not use.

✨ Integrations

CLI

tintin@:~/workspace/solidity/project-under-audit|⇒  semgrep --exclude="**mock**,**test**" --severity=WARNING --severity=ERROR -c /path_to_this_repo/rules .  

VSCode

main-vs-code-video.mp4

1. install https://marketplace.visualstudio.com/items?itemName=Semgrep.semgrep
2. configure:
   1. semgrep.scan.exclude 👉 **/node_modules/**, **test**, **mock**
   2. semgrep.scan.configuration 👉 auto, /path_to_this_repo/rules

⭐ Credits

Contribute, share! 🤗❤️

• @tintinweb
• decurity/semgrep-smart-contracts
• you? 🥹