Merge pull request #510 from DataDog/s.obregoso/fix_semgrepbypass

Prevent code from bypassing semgrep
DataDog · Dec 30, 2024 · a2e0e3f · a2e0e3f
2 parents 2742688 + 596e9f8
commit a2e0e3f
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/guarddog/analyzer/analyzer.py b/guarddog/analyzer/analyzer.py
@@ -283,6 +283,7 @@ def _invoke_semgrep(self, target: str, rules: Iterable[str]):
             cmd.append("--no-git-ignore")
             cmd.append("--json")
             cmd.append("--quiet")
+            cmd.append("--disable-nosem")
             cmd.append(f"--max-target-bytes={SEMGREP_MAX_TARGET_BYTES}")
             cmd.append(target)
             log.debug(f"Invoking semgrep with command line: {' '.join(cmd)}")