-
-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathfix-script-registry.json
More file actions
111 lines (111 loc) · 5.79 KB
/
Copy pathfix-script-registry.json
File metadata and controls
111 lines (111 loc) · 5.79 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
{
"license": "MPL-2.0",
"description": "Maps recipe IDs and categories to their fix scripts",
"registry": {
"by_category": {
"CommandInjection": "fix-command-injection.sh",
"HardcodedSecret": "fix-secret-to-env.sh",
"DynamicCodeExecution": "fix-dynamic-code-exec.sh",
"AtomExhaustion": "fix-atom-exhaustion.sh",
"UnsafeTypeCoercion": "fix-unsafe-type-coercion.sh",
"UnsafeDeserialization": "fix-unsafe-deserialize.sh",
"UnsafeFFI": "fix-unsafe-ffi.sh",
"UnsafeCode": "fix-sorry-lean.sh",
"PanicPath": "fix-unwrap-to-match.sh",
"DependencyPinning": "fix-unpinned-actions.sh",
"DependencyUpdate": "fix-dependabot.sh",
"TokenPermissions": "fix-workflow-permissions.sh",
"ExcessivePermissions": "fix-deno-permissions.sh",
"SecurityPolicy": "fix-security-policy.sh",
"LicenseCompliance": "fix-license-file.sh",
"StaticAnalysis": "fix-sast-workflow.sh",
"UncheckedAllocation": "fix-tmp-paths.sh",
"UncheckedError": "fix-unchecked-error.sh",
"ResourceLeak": "fix-resource-leak.sh",
"UnboundedLoop": null,
"RaceCondition": null,
"BlockingIO": null,
"InsecureHTTP": "fix-http-to-https.sh",
"MissingSPDX": "fix-missing-spdx.sh",
"ShellInjection": "fix-shell-quoting.sh",
"CORSWildcard": "fix-cors-wildcard.sh",
"SQLInjection": "fix-sql-parameterize.sh",
"XSS": "fix-innerhtml.sh",
"HeredocEval": "fix-heredoc-install.sh",
"PathTraversal": "fix-tmp-paths.sh",
"TodoMarkers": "fix-todo-markers.sh",
"BelieveMe": "fix-believe-me.sh",
"WorkflowHygiene": "fix-workflow-hygiene.sh",
"LicenseHygiene": "fix-license-hygiene.sh",
"MissingTrustfile": "fix-missing-trustfile.sh",
"MissingDustfile": "fix-missing-dustfile.sh",
"MissingAIManifest": "fix-missing-ai-manifest.sh",
"MissingAssailRecipe": "fix-missing-assail-recipe.sh",
"MissingProvenRef": "fix-missing-proven-ref.sh",
"MissingVerisimdbFeed": "fix-missing-verisimdb-feed.sh",
"MissingFeedbackIntegration": "fix-missing-feedback-integration.sh",
"MissingVexometerHooks": "fix-missing-vexometer-hooks.sh",
"TrackedNpmLockfile": "fix-tracked-package-lock.sh",
"LicensePMPLDrift": "fix-pmpl-drift.sh"
},
"by_recipe": {
"recipe-heredoc-to-install": "fix-heredoc-install.sh",
"recipe-unwrap-to-match": "fix-unwrap-to-match.sh",
"recipe-innerhtml-to-textcontent": "fix-innerhtml.sh",
"recipe-scorecard-pinned-dependencies": "fix-unpinned-actions.sh",
"recipe-sql-parameterize": "fix-sql-parameterize.sh",
"recipe-secret-to-env": "fix-secret-to-env.sh",
"recipe-safe-deserialize": "fix-unsafe-deserialize.sh",
"recipe-remove-sorry": "fix-sorry-lean.sh",
"recipe-scorecard-dependency-update-tool": "fix-dependabot.sh",
"recipe-safe-command": "fix-command-injection.sh",
"recipe-eval-to-safe-exec": "fix-eval-to-safe.sh",
"recipe-scorecard-sast": "fix-sast-workflow.sh",
"recipe-unsafe-ffi-wrapper": "fix-unsafe-ffi.sh",
"recipe-uncheckedallocation": "fix-tmp-paths.sh",
"recipe-unbounded-loop": null,
"recipe-racecondition": null,
"recipe-unchecked-error": "fix-unchecked-error.sh",
"recipe-resourceleak": "fix-resource-leak.sh",
"recipe-dynamic-apply-to-dispatch": "fix-dynamic-code-exec.sh",
"recipe-scorecard-security-policy": "fix-security-policy.sh",
"recipe-scorecard-token-permissions": "fix-workflow-permissions.sh",
"recipe-scorecard-license": "fix-license-file.sh",
"recipe-deno-least-privilege": "fix-deno-permissions.sh",
"recipe-remove-believe-me": "fix-believe-me.sh",
"recipe-pin-github-actions": "fix-unpinned-actions.sh",
"recipe-fix-spdx-license": "fix-missing-spdx.sh",
"recipe-shell-quote-vars": "fix-shell-quoting.sh",
"recipe-http-to-https": "fix-http-to-https.sh",
"proven-substitute-UnsafeCode": "fix-sorry-lean.sh",
"proven-substitute-DynamicCodeExecution": "fix-dynamic-code-exec.sh",
"proven-substitute-ExcessivePermissions": "fix-deno-permissions.sh",
"proven-substitute-UnsafeDeserialization": "fix-unsafe-deserialize.sh",
"proven-substitute-UncheckedAllocation": "fix-tmp-paths.sh",
"synthetic-eliminate-HardcodedSecret": "fix-secret-to-env.sh",
"synthetic-eliminate-AtomExhaustion": "fix-atom-exhaustion.sh",
"synthetic-eliminate-UnsafeTypeCoercion": "fix-unsafe-type-coercion.sh",
"recipe-workflow-hygiene": "fix-workflow-hygiene.sh",
"recipe-remove-irrelevant-workflow": "fix-workflow-hygiene.sh",
"recipe-license-hygiene": "fix-license-hygiene.sh",
"recipe-reuse-dual-license": "fix-license-hygiene.sh",
"recipe-add-trustfile": "fix-missing-trustfile.sh",
"recipe-add-dustfile": "fix-missing-dustfile.sh",
"recipe-add-ai-manifest": "fix-missing-ai-manifest.sh",
"recipe-add-assail": "fix-missing-assail-recipe.sh",
"recipe-add-proven-ref": "fix-missing-proven-ref.sh",
"recipe-add-verisimdb-feed": "fix-missing-verisimdb-feed.sh",
"recipe-add-feedback-integration": "fix-missing-feedback-integration.sh",
"recipe-add-vexometer-hooks": "fix-missing-vexometer-hooks.sh",
"recipe-remove-tracked-package-lock": "fix-tracked-package-lock.sh",
"cicd_rules/tracked_npm_lockfile": "fix-tracked-package-lock.sh",
"chapel-runs-on-pin-22-04": "fix-chapel-runs-on-pin.sh",
"codeql-cron-monthly": "fix-codeql-cron-monthly.sh",
"chapel-manpath-guard": "fix-chapel-manpath-guard.sh",
"chapel-chpl-llvm-export": "fix-chapel-chpl-llvm-export.sh",
"chapel-replace-chpl-about-with-version": "fix-chapel-replace-chpl-about.sh",
"reusable_workflow_sha_bump_needs_propagation": "propagate-sha-bump.sh",
"recipe-fix-pmpl-drift": "fix-pmpl-drift.sh"
}
}
}