History

trvon f3ffb92264 security: updates to opengrep rules, repair subsystem scanning logic and windows build logic		2026-05-03 01:06:25 -04:00
..
rules	security: updates to opengrep rules, repair subsystem scanning logic and windows build logic	2026-05-03 01:06:25 -04:00
tests/cpp	security: expanding opengrep suite and addressing issues	2026-05-02 21:33:22 -04:00
README.md	security: expanding opengrep suite and addressing issues	2026-05-02 21:33:22 -04:00

YAMS OpenGrep rules

Repo-owned OpenGrep/Semgrep-compatible rules live under tools/opengrep/rules.

Profiles:

rules/default/: low-noise hardening checks appropriate for local hooks.
rules/audit/: broader audit checks for security/correctness review. Expect triage.

Run the full local rule set:

opengrep --config tools/opengrep/rules/default --config tools/opengrep/rules/audit src include

Run rule tests:

opengrep test --config tools/opengrep/rules/audit/yams-cpp-security-audit.yml \
  tools/opengrep/tests/cpp/yams_cpp_security_audit.cpp

When adding rules, include ruleid and ok cases under tools/opengrep/tests/ and keep patterns repo-specific enough to be actionable.