chore: update existing nosemgreps and include semgrep as needed for b…

…uild (#737)
splunk · May 2, 2023 · f2ae295 · f2ae295
1 parent 3d356a3
commit f2ae295
Show file tree

Hide file tree

Showing 5 changed files with 5 additions and 4 deletions.
diff --git a/.github/workflows/build-test-release.yml b/.github/workflows/build-test-release.yml
@@ -229,6 +229,7 @@ jobs:
       - test-unit
       - test-smoke
       - pre-commit
+      - semgrep
       - appinspect-for-expected-outputs
     runs-on: ubuntu-latest
     steps:

diff --git a/splunk_add_on_ucc_framework/commands/build.py b/splunk_add_on_ucc_framework/commands/build.py
@@ -58,7 +58,7 @@
 
 PARENT_DIR = ".."
 internal_root_dir = os.path.dirname(os.path.dirname(__file__))
-# nosemgrep: splunk.autoescape-disabled
+# nosemgrep: splunk.autoescape-disabled, python.jinja2.security.audit.autoescape-disabled.autoescape-disabled
 j2_env = Environment(
     loader=FileSystemLoader(os.path.join(internal_root_dir, "templates"))
 )

diff --git a/splunk_add_on_ucc_framework/commands/modular_alert_builder/alert_actions_conf_gen.py b/splunk_add_on_ucc_framework/commands/modular_alert_builder/alert_actions_conf_gen.py
@@ -53,7 +53,7 @@ def __init__(
         self._all_settings = input_setting
         self._alert_settings = input_setting[ac.MODULAR_ALERTS]
         self._package_path = package_path
-        # nosemgrep: splunk.autoescape-disabled
+        # nosemgrep: splunk.autoescape-disabled, python.jinja2.security.audit.autoescape-disabled.autoescape-disabled
         self._templates = Environment(
             loader=FileSystemLoader(
                 op.join(op.dirname(op.realpath(__file__)), "arf_template")

diff --git a/splunk_add_on_ucc_framework/commands/modular_alert_builder/alert_actions_html_gen.py b/splunk_add_on_ucc_framework/commands/modular_alert_builder/alert_actions_html_gen.py
@@ -42,7 +42,7 @@ def __init__(self, input_setting=None, package_path=None):
         self._all_setting = input_setting
         self._package_path = package_path
         self._current_alert = None
-        # nosemgrep: splunk.autoescape-disabled
+        # nosemgrep: splunk.autoescape-disabled, python.jinja2.security.audit.autoescape-disabled.autoescape-disabled
         self._templates = Environment(
             loader=FileSystemLoader(
                 [

diff --git a/splunk_add_on_ucc_framework/commands/modular_alert_builder/alert_actions_py_gen.py b/splunk_add_on_ucc_framework/commands/modular_alert_builder/alert_actions_py_gen.py
@@ -43,7 +43,7 @@ def __init__(
         self._alert_actions_setting = input_setting[ac.MODULAR_ALERTS]
         self._ta_name = self._all_setting.get(ac.SHORT_NAME)
         self._lib_dir = self.get_python_lib_dir_name(self._ta_name)
-        # nosemgrep: splunk.autoescape-disabled
+        # nosemgrep: splunk.autoescape-disabled, python.jinja2.security.audit.autoescape-disabled.autoescape-disabled
         self._templates = Environment(
             loader=FileSystemLoader(
                 op.join(op.dirname(op.realpath(__file__)), "arf_template")