Fixed Salus configuration (#23)

DopplerHQ · May 11, 2022 · 274424a · 274424a
1 parent a22c14c
commit 274424a
Show file tree

Hide file tree

Showing 3 changed files with 11 additions and 2 deletions.
diff --git a/.github/workflows/scanners.yml b/.github/workflows/scanners.yml
@@ -15,7 +15,7 @@ jobs:
         id: salus_scan
         uses: federacy/[email protected]
         env:
-          SALUS_CONFIGURATION: "file://../../salus-config.yaml"
+          SALUS_CONFIGURATION: "file://salus-config.yml"
       - uses: actions/upload-artifact@master
         if: failure()
         with:

diff --git a/salus-config.yml b/salus-config.yml
@@ -19,7 +19,7 @@ enforced_scanners: "all"
 scanner_configs:
   Semgrep:
     matches:
-      - config: ../semgrep_configs/eval.yaml
+      - config: semgrep_configs/eval.yaml
         forbidden: true
         exclude:
           - node_modules
diff --git a/semgrep_configs/eval.yaml b/semgrep_configs/eval.yaml
@@ -0,0 +1,9 @@
+rules:
+  - id: eval-search
+    severity: ERROR
+    languages:
+      - javascript
+      - typescript
+    message: eval() is evil
+    patterns:
+      - pattern: eval(...)