-
Notifications
You must be signed in to change notification settings - Fork 1
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[BST-13457] Removes prefix BoostSecurity for 3rd party scanners. #179
base: main
Are you sure you want to change the base?
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Seems some casing are not exactly what the product advertise, I don't know if we care, you can ignore if we dont.
but Ssemgrep
has a typo
@@ -2,7 +2,7 @@ api_version: 1.0 | |||
|
|||
|
|||
id: boostsecurityio/bundler-audit | |||
name: BoostSecurity bundler-audit | |||
name: Bundler-audit |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Are you sure the case should change, name seems to be in lower case
https://github.com/rubysec/bundler-audit
@@ -2,7 +2,7 @@ api_version: 1.0 | |||
|
|||
|
|||
id: boostsecurityio/gosec | |||
name: BoostSecurity gosec | |||
name: Gosec |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Here too it seems lower case
https://github.com/securego/gosec
@@ -2,7 +2,7 @@ api_version: 1.0 | |||
|
|||
|
|||
id: boostsecurityio/npm-audit | |||
name: BoostSecurity npm-audit | |||
name: Npm-audit |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Seems linke a tool from npm
which is lower case, should it change?
https://docs.npmjs.com/cli/v9/commands/npm-audit
@@ -2,7 +2,7 @@ api_version: 1.0 | |||
|
|||
|
|||
id: boostsecurityio/osv-scanner | |||
name: BoostSecurity osv-scanner | |||
name: OSV Scanner |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
According to https://github.com/google/osv-scanner maybe it should be OSV-Scanner with a dash
@@ -1,7 +1,7 @@ | |||
api_version: 1.0 | |||
|
|||
id: boostsecurityio/semgrep | |||
name: BoostSecurity semgrep | |||
name: Ssemgrep |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
(IMPORTANT) There's an extra s here, Semgrep
seems to be the right casing
For 3rd party scanners, we're to remove the prefix BoostSecurity, recommended to avoid issues with the 3rd parties.