io.codemodder.providers.sarif.semgrep.SemgrepScan Maven / Gradle / Ivy

Go to download

Show more of this group Show more artifacts with this name
Show all versions of codemodder-plugin-semgrep Show documentation

Plugin to enable the use of semgrep in codemods

There is a newer version: 0.97.8

Show newest version

package io.codemodder.providers.sarif.semgrep;

import io.codemodder.Codemod;
import java.lang.annotation.Documented;
import java.lang.annotation.ElementType;
import java.lang.annotation.Retention;
import java.lang.annotation.RetentionPolicy;
import java.lang.annotation.Target;
import javax.inject.Qualifier;

/**
 * This tells the framework to inject the results of a Semgrep scan into the following parameter.
 * This can only inject {@link io.codemodder.RuleSarif} types.
 */
@Documented
@Qualifier
@Retention(RetentionPolicy.RUNTIME)
@Target(ElementType.PARAMETER)
public @interface SemgrepScan {

  /** A YAML string that represents Semgrep rule(s). */
  String yaml() default "";

  /**
   * The classpath resource path of the Semgrep YAML file. It is assumed the path will be in the
   * same package as the {@link Codemod}.
   *
   * So, for instance, if you had a codemod in com.acme.codemods, and a YAML rule
   * file in /com/acme/codemods/my-rule.yaml, you would simply specify "my-rule.yaml" for this
   * value.
   */
  String pathToYaml() default "";

  /**
   * The Semgrep rule "id" field from the YAML. This is needed to disambiguate Semgrep results as we
   * consolidate Semgrep rules into one scan. If unspecified, the rule ID will be assumed to be the
   * one and only rule specified in the YAML. If there are multiple rules in the YAML, the rule
   * desired by the codemod will be ambiguous and an error will occur.
   */
  String ruleId() default "";
}