Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[BST-13457] Removes prefix BoostSecurity for 3rd party scanners. #179

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

stlef14
Copy link

@stlef14 stlef14 commented Nov 8, 2024

For 3rd party scanners, we're to remove the prefix BoostSecurity, recommended to avoid issues with the 3rd parties.

Copy link

@lindycoder lindycoder left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Seems some casing are not exactly what the product advertise, I don't know if we care, you can ignore if we dont.

but Ssemgrep has a typo

@@ -2,7 +2,7 @@ api_version: 1.0


id: boostsecurityio/bundler-audit
name: BoostSecurity bundler-audit
name: Bundler-audit

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Are you sure the case should change, name seems to be in lower case
https://github.com/rubysec/bundler-audit

@@ -2,7 +2,7 @@ api_version: 1.0


id: boostsecurityio/gosec
name: BoostSecurity gosec
name: Gosec

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Here too it seems lower case
https://github.com/securego/gosec

@@ -2,7 +2,7 @@ api_version: 1.0


id: boostsecurityio/npm-audit
name: BoostSecurity npm-audit
name: Npm-audit

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Seems linke a tool from npm which is lower case, should it change?
https://docs.npmjs.com/cli/v9/commands/npm-audit

@@ -2,7 +2,7 @@ api_version: 1.0


id: boostsecurityio/osv-scanner
name: BoostSecurity osv-scanner
name: OSV Scanner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

According to https://github.com/google/osv-scanner maybe it should be OSV-Scanner with a dash

@@ -1,7 +1,7 @@
api_version: 1.0

id: boostsecurityio/semgrep
name: BoostSecurity semgrep
name: Ssemgrep

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

(IMPORTANT) There's an extra s here, Semgrep seems to be the right casing

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants