122 lines
12 KiB
Plaintext
122 lines
12 KiB
Plaintext
2025-05-10 00:33:24,807 - semgrep.notifications - WARNING - METRICS: Using configs from the Registry (like --config=p/ci) reports pseudonymous rule metrics to semgrep.dev.
|
||
To disable Registry rule metrics, use "--metrics=off".
|
||
Using configs only from local files (like --config=xyz.yml) does not enable metrics.
|
||
|
||
More information: https://semgrep.dev/docs/metrics
|
||
|
||
2025-05-10 00:33:24,810 - semgrep.run_scan - DEBUG - semgrep version 1.2.0
|
||
2025-05-10 00:33:24,819 - semgrep.git - DEBUG - Failed to get project url from 'git ls-remote': Command failed with exit code: 128
|
||
-----
|
||
Command failed with output:
|
||
fatal: No remote configured to list refs from.
|
||
|
||
|
||
Failed to run 'git ls-remote --get-url'. Possible reasons:
|
||
|
||
- the git binary is not available
|
||
- the current working directory is not a git repository
|
||
- the baseline commit is not a parent of the current commit
|
||
(if you are running through semgrep-app, check if you are setting `SEMGREP_BRANCH` or `SEMGREP_BASELINE_COMMIT` properly)
|
||
- the current working directory is not marked as safe
|
||
(fix with `git config --global --add safe.directory $(pwd)`)
|
||
|
||
Try running the command yourself to debug the issue.
|
||
2025-05-10 00:33:24,820 - semgrep.config_resolver - DEBUG - Loading local config from /home/runner/workspace/.config/.semgrep/semgrep_rules.json
|
||
2025-05-10 00:33:24,823 - semgrep.config_resolver - DEBUG - Done loading local config from /home/runner/workspace/.config/.semgrep/semgrep_rules.json
|
||
2025-05-10 00:33:24,831 - semgrep.config_resolver - DEBUG - Saving rules to /tmp/semgrep-mthvn42m.rules
|
||
2025-05-10 00:33:25,197 - semgrep.semgrep_core - DEBUG - Failed to open resource semgrep-core-proprietary: [Errno 2] No such file or directory: '/tmp/_MEI1ufMVi/semgrep/bin/semgrep-core-proprietary'.
|
||
2025-05-10 00:33:25,912 - semgrep.rule_lang - DEBUG - semgrep-core validation response: valid=True
|
||
2025-05-10 00:33:25,913 - semgrep.rule_lang - DEBUG - semgrep-core validation succeeded
|
||
2025-05-10 00:33:25,913 - semgrep.rule_lang - DEBUG - RPC validation succeeded
|
||
2025-05-10 00:33:25,913 - semgrep.config_resolver - DEBUG - loaded 1 configs in 1.0931837558746338
|
||
2025-05-10 00:33:26,154 - semgrep.run_scan - VERBOSE - running 1250 rules from 1 config /home/runner/workspace/.config/.semgrep/semgrep_rules.json_0
|
||
2025-05-10 00:33:26,154 - semgrep.run_scan - VERBOSE - No .semgrepignore found. Using default .semgrepignore rules. See the docs for the list of default ignores: https://semgrep.dev/docs/cli-usage/#ignore-files
|
||
2025-05-10 00:33:26,158 - semgrep.run_scan - VERBOSE - Rules:
|
||
2025-05-10 00:33:26,158 - semgrep.run_scan - VERBOSE - <SKIPPED DATA (too many entries; use --max-log-list-entries)>
|
||
2025-05-10 00:33:26,661 - semgrep.core_runner - DEBUG - Passing whole rules directly to semgrep_core
|
||
2025-05-10 00:33:26,855 - semgrep.core_runner - DEBUG - Running Semgrep engine with command:
|
||
2025-05-10 00:33:26,855 - semgrep.core_runner - DEBUG - /tmp/_MEI1ufMVi/semgrep/bin/opengrep-core -json -rules /tmp/tmp6vt4ey5_.json -j 8 -targets /tmp/tmpsta40moi -timeout 5 -timeout_threshold 3 -max_memory 0 -fast
|
||
2025-05-10 00:33:29,983 - semgrep.core_runner - DEBUG - --- semgrep-core stderr ---
|
||
[00.07][[34mINFO[0m]: Executed as: /tmp/_MEI1ufMVi/semgrep/bin/opengrep-core -json -rules /tmp/tmp6vt4ey5_.json -j 8 -targets /tmp/tmpsta40moi -timeout 5 -timeout_threshold 3 -max_memory 0 -fast
|
||
[00.07][[34mINFO[0m]: Version: 1.2.0
|
||
[00.07][[34mINFO[0m]: Parsing rules in /tmp/tmp6vt4ey5_.json
|
||
[00.82][[34mINFO[0m]: scan: processing 303 files (skipping 0), with 487 rules (skipping 0 )
|
||
[03.08][[34mINFO[0m]: Custom ignore pattern: None
|
||
[03.08][[34mINFO[0m]: Custom ignore pattern: None
|
||
--- end semgrep-core stderr ---
|
||
2025-05-10 00:33:29,991 - semgrep.rule_match - DEBUG - match_key = ('', PosixPath('client/index.html'), 'config..semgrep.vendored-rules.html.security.audit.missing-integrity') match_id = 0ee74fd49637bebe183eca7188dbde26e386314e62cc2e7ba1ee60b377b638243fcd84e6c6fa04886198ccacfa6a711bfbcc61a28f9ddc913d5b3c53083cbc90_0
|
||
2025-05-10 00:33:29,992 - semgrep.rule_match - DEBUG - match_key = (' rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta3/css/all.min.css" / (?is).*integrity= (google-analytics\\.com|fonts\\.googleapis\\.com|fonts\\.gstatic\\.com|googletagmanager\\.com) .*rel\\s*=\\s*[\'"]?preconnect.* href="... :// ..." href="//..." href=\'... :// ...\' href=\'//...\' src="... :// ..." src="//..." src=\'... :// ...\' src=\'//...\' <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta3/css/all.min.css" / > <script rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta3/css/all.min.css" / >...</script>', PosixPath('client/index.html'), 'config..semgrep.vendored-rules.html.security.audit.missing-integrity') match_id = 1068497918b233fd4d3e50f287aaf6ab1a03059c638e7dd12249612bb34d624f7036ebd3f250440227c595b791530ce2bb70f5a13d3e4f169ddcde97bedfc6bc_0
|
||
2025-05-10 00:33:29,993 - semgrep.rule_match - DEBUG - match_key = (' rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta3/css/all.min.css" / (?is).*integrity= (google-analytics\\.com|fonts\\.googleapis\\.com|fonts\\.gstatic\\.com|googletagmanager\\.com) .*rel\\s*=\\s*[\'"]?preconnect.* href="... :// ..." href="//..." href=\'... :// ...\' href=\'//...\' src="... :// ..." src="//..." src=\'... :// ...\' src=\'//...\' <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta3/css/all.min.css" / > <script rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta3/css/all.min.css" / >...</script>', PosixPath('client/index.html'), 'config..semgrep.vendored-rules.html.security.audit.missing-integrity') match_id = 1068497918b233fd4d3e50f287aaf6ab1a03059c638e7dd12249612bb34d624f7036ebd3f250440227c595b791530ce2bb70f5a13d3e4f169ddcde97bedfc6bc_0
|
||
2025-05-10 00:33:29,993 - semgrep.rule_match - DEBUG - match_key = (' rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta3/css/all.min.css" / (?is).*integrity= (google-analytics\\.com|fonts\\.googleapis\\.com|fonts\\.gstatic\\.com|googletagmanager\\.com) .*rel\\s*=\\s*[\'"]?preconnect.* href="... :// ..." href="//..." href=\'... :// ...\' href=\'//...\' src="... :// ..." src="//..." src=\'... :// ...\' src=\'//...\' <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta3/css/all.min.css" / > <script rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta3/css/all.min.css" / >...</script>', PosixPath('client/index.html'), 'config..semgrep.vendored-rules.html.security.audit.missing-integrity') match_id = 1068497918b233fd4d3e50f287aaf6ab1a03059c638e7dd12249612bb34d624f7036ebd3f250440227c595b791530ce2bb70f5a13d3e4f169ddcde97bedfc6bc_0
|
||
2025-05-10 00:33:29,994 - semgrep.rule_match - DEBUG - match_key = ('', PosixPath('client/index.html'), 'config..semgrep.vendored-rules.html.security.audit.missing-integrity') match_id = 0ee74fd49637bebe183eca7188dbde26e386314e62cc2e7ba1ee60b377b638243fcd84e6c6fa04886198ccacfa6a711bfbcc61a28f9ddc913d5b3c53083cbc90_0
|
||
2025-05-10 00:33:29,995 - semgrep.rule_match - DEBUG - match_key = (' type="text/javascript" src="https://replit.com/public/js/replit-dev-banner.js" (?is).*integrity= (google-analytics\\.com|fonts\\.googleapis\\.com|fonts\\.gstatic\\.com|googletagmanager\\.com) .*rel\\s*=\\s*[\'"]?preconnect.* href="... :// ..." href="//..." href=\'... :// ...\' href=\'//...\' src="... :// ..." src="//..." src=\'... :// ...\' src=\'//...\' <link type="text/javascript" src="https://replit.com/public/js/replit-dev-banner.js" > <script type="text/javascript" src="https://replit.com/public/js/replit-dev-banner.js" >...</script>', PosixPath('client/index.html'), 'config..semgrep.vendored-rules.html.security.audit.missing-integrity') match_id = 0728b64e224596592d04447ba8a642ff94e1fb9fcc07be26d49dc7e7f6898e638ad16ffcaca086932c58f4c6400fe32603323afef02cf9bfebcb0e4a53562a40_0
|
||
2025-05-10 00:33:29,995 - semgrep.rule_match - DEBUG - match_key = (' type="text/javascript" src="https://replit.com/public/js/replit-dev-banner.js" (?is).*integrity= (google-analytics\\.com|fonts\\.googleapis\\.com|fonts\\.gstatic\\.com|googletagmanager\\.com) .*rel\\s*=\\s*[\'"]?preconnect.* href="... :// ..." href="//..." href=\'... :// ...\' href=\'//...\' src="... :// ..." src="//..." src=\'... :// ...\' src=\'//...\' <link type="text/javascript" src="https://replit.com/public/js/replit-dev-banner.js" > <script type="text/javascript" src="https://replit.com/public/js/replit-dev-banner.js" >...</script>', PosixPath('client/index.html'), 'config..semgrep.vendored-rules.html.security.audit.missing-integrity') match_id = 0728b64e224596592d04447ba8a642ff94e1fb9fcc07be26d49dc7e7f6898e638ad16ffcaca086932c58f4c6400fe32603323afef02cf9bfebcb0e4a53562a40_0
|
||
2025-05-10 00:33:29,995 - semgrep.rule_match - DEBUG - match_key = (' type="text/javascript" src="https://replit.com/public/js/replit-dev-banner.js" (?is).*integrity= (google-analytics\\.com|fonts\\.googleapis\\.com|fonts\\.gstatic\\.com|googletagmanager\\.com) .*rel\\s*=\\s*[\'"]?preconnect.* href="... :// ..." href="//..." href=\'... :// ...\' href=\'//...\' src="... :// ..." src="//..." src=\'... :// ...\' src=\'//...\' <link type="text/javascript" src="https://replit.com/public/js/replit-dev-banner.js" > <script type="text/javascript" src="https://replit.com/public/js/replit-dev-banner.js" >...</script>', PosixPath('client/index.html'), 'config..semgrep.vendored-rules.html.security.audit.missing-integrity') match_id = 0728b64e224596592d04447ba8a642ff94e1fb9fcc07be26d49dc7e7f6898e638ad16ffcaca086932c58f4c6400fe32603323afef02cf9bfebcb0e4a53562a40_0
|
||
2025-05-10 00:33:29,998 - semgrep.core_runner - DEBUG - semgrep ran in 0:00:03.337440 on 103 files
|
||
2025-05-10 00:33:30,000 - semgrep.core_runner - DEBUG - findings summary: 2 warning, 0 error, 0 info
|
||
2025-05-10 00:33:30,004 - semgrep.app.auth - DEBUG - Getting API token from settings file
|
||
2025-05-10 00:33:30,004 - semgrep.app.auth - DEBUG - No API token found in settings file
|
||
2025-05-10 00:33:30,005 - semgrep.semgrep_core - DEBUG - Failed to open resource semgrep-core-proprietary: [Errno 2] No such file or directory: '/tmp/_MEI1ufMVi/semgrep/bin/semgrep-core-proprietary'.
|
||
2025-05-10 00:33:30,110 - semgrep.output - VERBOSE -
|
||
========================================
|
||
Files skipped:
|
||
========================================
|
||
|
||
Always skipped by Opengrep:
|
||
|
||
• <none>
|
||
|
||
Skipped by .gitignore:
|
||
(Disable by passing --no-git-ignore)
|
||
|
||
• <all files not listed by `git ls-files` were skipped>
|
||
|
||
Skipped by .semgrepignore:
|
||
- https://semgrep.dev/docs/ignoring-files-folders-code/#understand-semgrep-defaults
|
||
|
||
• <none>
|
||
|
||
Skipped by --include patterns:
|
||
|
||
• <none>
|
||
|
||
Skipped by --exclude patterns:
|
||
|
||
• <none>
|
||
|
||
Files skipped due to insufficient read permissions:
|
||
|
||
• <none>
|
||
|
||
Skipped by limiting to files smaller than 1000000 bytes:
|
||
(Adjust with the --max-target-bytes flag)
|
||
|
||
• attached_assets/8w-oevrI.jpeg
|
||
• attached_assets/DSC01368 2.jpeg
|
||
• attached_assets/DSC01380.jpeg
|
||
• attached_assets/DSC01394 2.jpeg
|
||
• attached_assets/DSC01466 2.jpeg
|
||
• attached_assets/Fadia-132.jpg
|
||
• attached_assets/Fadia-15.jpg
|
||
• attached_assets/Fadia-156.jpg
|
||
• attached_assets/save.jpeg
|
||
• client/src/assets/Fadia-132.jpg
|
||
• client/src/assets/Fadia-15.jpg
|
||
• client/src/assets/Fadia-156.jpg
|
||
• generated-icon.png
|
||
|
||
Partially analyzed due to parsing or internal Opengrep errors
|
||
|
||
• client/index.html (1 lines skipped)
|
||
• tailwind.config.ts (1 lines skipped)
|
||
|
||
2025-05-10 00:33:30,111 - semgrep.output - INFO - Some files were skipped or only partially analyzed.
|
||
Scan was limited to files tracked by git.
|
||
Partially scanned: 2 files only partially analyzed due to parsing or internal Opengrep errors
|
||
Scan skipped: 13 files larger than 1.0 MB
|
||
For a full list of skipped files, run opengrep with the --verbose flag.
|
||
|
||
Ran 443 rules on 103 files: 2 findings.
|
||
2025-05-10 00:33:30,112 - semgrep.app.version - DEBUG - Version cache does not exist
|
||
2025-05-10 00:33:30,133 - semgrep.metrics - VERBOSE - Not sending pseudonymous metrics since metrics are configured to OFF and registry usage is False
|