pryscraper/.semgrep/rules.yaml
cryptorugmunch 4ef155f8fe
Some checks failed
CI / lint (push) Failing after 47s
CI / typecheck (push) Successful in 56s
CI / test (push) Successful in 1m31s
CI / Secret scan (gitleaks) (push) Failing after 29s
CI / Security audit (bandit) (push) Failing after 33s
chore: rename munchcrawl → Pry across docs and code
Fleet-wide rename of legacy munchcrawl references to Pry/pryscraper.
External referral URLs in pryscraper/proxy_referrals.py left as-is
— those are third-party service registrations needing manual update:
  brightdata.com, smartproxy.com, iproyal.com, webshare.io
2026-07-09 13:52:16 +02:00

25 lines
706 B
YAML

rules:
- id: no-print-in-production
pattern: print(...)
message: "Remove print() before committing to production code. Use structured logging instead."
severity: WARNING
languages: [python]
paths:
exclude:
- tests/
- "**/test_*.py"
- id: no-os-system
pattern: os.system(...)
message: "os.system() is dangerous. Use subprocess.run() with shell=False instead."
severity: ERROR
languages: [python]
- id: no-eval-exec
patterns:
- pattern-either:
- pattern: eval(...)
- pattern: exec(...)
message: "eval()/exec() are dangerous and should not be used in production code."
severity: ERROR
languages: [python]