Skip to content

Extend SEI Cert guideline mapping for cppcheck and gcc analyzers#4804

Open
gulyasgergely902 wants to merge 6 commits intoEricsson:masterfrom
gulyasgergely902:extend-seicert-mapping-cppcheck-gcc
Open

Extend SEI Cert guideline mapping for cppcheck and gcc analyzers#4804
gulyasgergely902 wants to merge 6 commits intoEricsson:masterfrom
gulyasgergely902:extend-seicert-mapping-cppcheck-gcc

Conversation

@gulyasgergely902
Copy link
Copy Markdown
Collaborator

In this change, the mapping for the existing sei cert guidelines for clang was extended to have the analyzers cppcheck and gcc as well.

The label files for cppcheck and gcc now contains all the found sei cert guidelines.

@gulyasgergely902 gulyasgergely902 added server 🖥️ cppcheck 🐞 CppCheck is a static analysis tool for C++ code gcc 🐃 GNU GCC Static Analyzer labels Mar 18, 2026
@gulyasgergely902 gulyasgergely902 added this to the release 6.28.0 milestone Mar 18, 2026
@gulyasgergely902 gulyasgergely902 force-pushed the extend-seicert-mapping-cppcheck-gcc branch 2 times, most recently from 3185dd2 to 8279302 Compare March 19, 2026 13:17
@gulyasgergely902 gulyasgergely902 marked this pull request as ready for review March 19, 2026 13:40
@gulyasgergely902 gulyasgergely902 force-pushed the extend-seicert-mapping-cppcheck-gcc branch from 8279302 to 161893f Compare March 19, 2026 13:54
Copy link
Copy Markdown
Member

@dkrupp dkrupp left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Review fixes added as new commits.

LGTM.

Comment thread config/labels/analyzers/cppcheck.json Outdated
],
"cppcheck-subtractPointers": [
"severity:MEDIUM",
"sei-cert-c:arr336-c"
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

arr36-c

Comment thread config/labels/analyzers/cppcheck.json Outdated
"profile:sensitive",
"severity:HIGH"
"severity:HIGH",
"sei-cert-c:dcl-30-c"
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

dcl30-c

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

cppcheck 🐞 CppCheck is a static analysis tool for C++ code gcc 🐃 GNU GCC Static Analyzer server 🖥️

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants