{"payload":{"feedbackUrl":"https://github.com/orgs/community/discussions/53140","repo":{"id":227803815,"defaultBranch":"develop","name":"semgrep","ownerLogin":"semgrep","currentUserCanPush":false,"isFork":false,"isEmpty":false,"createdAt":"2019-12-13T09:29:54.000Z","ownerAvatar":"https://avatars.githubusercontent.com/u/29760937?v=4","public":true,"private":false,"isOrgOwned":true},"refInfo":{"name":"","listCacheKey":"v0:1716572989.0","currentOid":""},"activityList":{"items":[{"before":"3212d54a026eea8d5a710c1e67f7fb5bcf4aeec3","after":null,"ref":"refs/heads/gautam/sc-844","pushedAt":"2024-05-24T17:49:49.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"jarrydlee","name":"Jarryd Lee","path":"/jarrydlee","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/5650600?s=80&v=4"}},{"before":"42f0152465c81ad96e44b763f9443d7d2e54ca68","after":null,"ref":"refs/heads/sync-with-pro-1716490898","pushedAt":"2024-05-23T19:30:43.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"aryx","name":"Yoann Padioleau","path":"/aryx","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/332336?s=80&v=4"}},{"before":"234a400a1223bdbd74eacba32c2863b77507462d","after":"d2374b7e4de9e951a6d61a4fcef355f3f1bc278b","ref":"refs/heads/develop","pushedAt":"2024-05-23T19:30:42.000Z","pushType":"pr_merge","commitsCount":2,"pusher":{"login":"aryx","name":"Yoann Padioleau","path":"/aryx","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/332336?s=80&v=4"},"commit":{"message":"chore: Bump version to 1.74.0 (semgrep/semgrep-proprietary#1587)\n\nsynced from OSS 234a400a1223bdbd74eacba32c2863b77507462d\n\nCo-authored-by: aryx <aryx@users.noreply.github.com>\n\nsynced from Pro 7811d77293c7497cd7566c2eb1d98800ff6b5b8d","shortMessageHtmlLink":"chore: Bump version to 1.74.0 (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2313532416\" data-permission-text=\"Title is private\" data-url=\"https://github.com/semgrep/semgrep-proprietary/issues/1587\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/semgrep/semgrep-proprietary/pull/1587/hovercard\" href=\"https://github.com/semgrep/semgrep-proprietary/pull/1587\">semgrep/semgrep-proprietary#1587</a>)"}},{"before":null,"after":"42f0152465c81ad96e44b763f9443d7d2e54ca68","ref":"refs/heads/sync-with-pro-1716490898","pushedAt":"2024-05-23T19:01:56.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"semgrep-ci[bot]","name":null,"path":"/apps/semgrep-ci","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/29760937?s=80&v=4"},"commit":{"message":"chore: Bump version to 1.74.0 (semgrep/semgrep-proprietary#1587)\n\nsynced from OSS 234a400a1223bdbd74eacba32c2863b77507462d\n\nCo-authored-by: aryx <aryx@users.noreply.github.com>\n\nsynced from Pro 7811d77293c7497cd7566c2eb1d98800ff6b5b8d","shortMessageHtmlLink":"chore: Bump version to 1.74.0 (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2313532416\" data-permission-text=\"Title is private\" data-url=\"https://github.com/semgrep/semgrep-proprietary/issues/1587\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/semgrep/semgrep-proprietary/pull/1587/hovercard\" href=\"https://github.com/semgrep/semgrep-proprietary/pull/1587\">semgrep/semgrep-proprietary#1587</a>)"}},{"before":"8356d214baf30055b10fd6ff5a41c9ba3a7396e7","after":"234a400a1223bdbd74eacba32c2863b77507462d","ref":"refs/heads/develop","pushedAt":"2024-05-23T17:55:03.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"aryx","name":"Yoann Padioleau","path":"/aryx","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/332336?s=80&v=4"},"commit":{"message":"chore: Bump version to 1.74.0","shortMessageHtmlLink":"chore: Bump version to 1.74.0"}},{"before":"115c9eb4b315380501bfc6a89138d3f7ee47ed5f","after":null,"ref":"refs/heads/release-1.74.0","pushedAt":"2024-05-23T17:55:03.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"aryx","name":"Yoann Padioleau","path":"/aryx","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/332336?s=80&v=4"}},{"before":null,"after":"115c9eb4b315380501bfc6a89138d3f7ee47ed5f","ref":"refs/heads/release-1.74.0","pushedAt":"2024-05-23T16:52:28.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"semgrep-ci[bot]","name":null,"path":"/apps/semgrep-ci","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/29760937?s=80&v=4"},"commit":{"message":"chore: Bump version to 1.74.0","shortMessageHtmlLink":"chore: Bump version to 1.74.0"}},{"before":"75df395dbb3538542f9e5f5a6103a810165b763c","after":null,"ref":"refs/heads/sync-with-pro-1716473064","pushedAt":"2024-05-23T15:45:06.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"aryx","name":"Yoann Padioleau","path":"/aryx","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/332336?s=80&v=4"}},{"before":"fce31dffc18b658a3db83729221ba2b593af1902","after":"8356d214baf30055b10fd6ff5a41c9ba3a7396e7","ref":"refs/heads/develop","pushedAt":"2024-05-23T15:45:05.000Z","pushType":"pr_merge","commitsCount":8,"pusher":{"login":"aryx","name":"Yoann Padioleau","path":"/aryx","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/332336?s=80&v=4"},"commit":{"message":"Revert \"fix: remove irrelevant logs for dry run (semgrep/semgrep-proprietary#1564)\" (semgrep/semgrep-proprietary#1584)\n\nThis reverts commit 5c2941fac1170b1a4877f2c35775921f52e08811.\n\nsynced from Pro beb924465eab79b0b0bbbab9f7c6a8f6ade402cb","shortMessageHtmlLink":"Revert \"fix: remove irrelevant logs for dry run (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2309250207\" data-permission-text=\"Title is private\" data-url=\"https://github.com/semgrep/semgrep-proprietary/issues/1564\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/semgrep/semgrep-proprietary/pull/1564/hovercard\" href=\"https://github.com/semgrep/semgrep-proprietary/pull/1564\">semgrep/semgrep-prop…</a>"}},{"before":null,"after":"75df395dbb3538542f9e5f5a6103a810165b763c","ref":"refs/heads/sync-with-pro-1716473064","pushedAt":"2024-05-23T14:05:41.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"semgrep-ci[bot]","name":null,"path":"/apps/semgrep-ci","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/29760937?s=80&v=4"},"commit":{"message":"Revert \"fix: remove irrelevant logs for dry run (semgrep/semgrep-proprietary#1564)\" (semgrep/semgrep-proprietary#1584)\n\nThis reverts commit 5c2941fac1170b1a4877f2c35775921f52e08811.\n\nsynced from Pro beb924465eab79b0b0bbbab9f7c6a8f6ade402cb","shortMessageHtmlLink":"Revert \"fix: remove irrelevant logs for dry run (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2309250207\" data-permission-text=\"Title is private\" data-url=\"https://github.com/semgrep/semgrep-proprietary/issues/1564\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/semgrep/semgrep-proprietary/pull/1564/hovercard\" href=\"https://github.com/semgrep/semgrep-proprietary/pull/1564\">semgrep/semgrep-prop…</a>"}},{"before":null,"after":"2d903c86139521a07d347099bb33a644010bb764","ref":"refs/heads/sync-with-pro-1716462114","pushedAt":"2024-05-23T11:02:58.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"semgrep-ci[bot]","name":null,"path":"/apps/semgrep-ci","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/29760937?s=80&v=4"},"commit":{"message":"fix: add missing const propagation in deep taint (semgrep/semgrep-proprietary#1576)\n\nTaint signature inference in interfile taint analysis is missing\nconstant propagation.\n\nWe may miss findings such as the following\n\n```\nfunction main() {\n    // Here's the source\n    let t = 'taint'\n\n    ok = 'some string'\n    // This is found when looking for sink \"$X\" + $Y\n    ok = ok + t \n\n    f(t)\n}\n\nfunction f(t_arg) {\n    let bug = 'some string'\n    // But this is NOT FOUND when looking for sink \"$X\" + $Y \n    bug = bug + t_arg \n}\n```\n\nThis PR runs const propagation when doing inferring the taint signature\nand fixes the issue.\n\nThe fix is actually from @IagoAbal (thank you so much!). I just added\nwhat he suggested and added a test for this.\n\nsynced from Pro ba188e4dc5ea5e7e04e64ab5f8d228a8f2e06e27","shortMessageHtmlLink":"fix: add missing const propagation in deep taint (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2311479590\" data-permission-text=\"Title is private\" data-url=\"https://github.com/semgrep/semgrep-proprietary/issues/1576\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/semgrep/semgrep-proprietary/pull/1576/hovercard\" href=\"https://github.com/semgrep/semgrep-proprietary/pull/1576\">semgrep/semgrep-pro…</a>"}},{"before":"efb6d26350b14fcd9fa352f7c89de80dc327524d","after":null,"ref":"refs/heads/sync_with_pro","pushedAt":"2024-05-23T08:58:07.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"aryx","name":"Yoann Padioleau","path":"/aryx","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/332336?s=80&v=4"}},{"before":"128561f10eee2b47cdbad27a4e7cdb97a71b636d","after":"fce31dffc18b658a3db83729221ba2b593af1902","ref":"refs/heads/develop","pushedAt":"2024-05-23T08:58:06.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"aryx","name":"Yoann Padioleau","path":"/aryx","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/332336?s=80&v=4"},"commit":{"message":"sync-with-PRO workflow (#10270)\n\ntest plan:\r\ntrigger from GHA dashboard from this branch and\r\ncheck if PR created in semgrep-pro","shortMessageHtmlLink":"sync-with-PRO workflow (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2310887743\" data-permission-text=\"Title is private\" data-url=\"https://github.com/semgrep/semgrep/issues/10270\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/semgrep/semgrep/pull/10270/hovercard\" href=\"https://github.com/semgrep/semgrep/pull/10270\">#10270</a>)"}},{"before":"6b787e22beef4760c85339f2416e528ce3ad5368","after":"efb6d26350b14fcd9fa352f7c89de80dc327524d","ref":"refs/heads/sync_with_pro","pushedAt":"2024-05-23T08:08:07.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"aryx","name":"Yoann Padioleau","path":"/aryx","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/332336?s=80&v=4"},"commit":{"message":"more","shortMessageHtmlLink":"more"}},{"before":"2b668a46c05a0ed0ffca53f14d4112fd75613114","after":"6b787e22beef4760c85339f2416e528ce3ad5368","ref":"refs/heads/sync_with_pro","pushedAt":"2024-05-23T08:05:11.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"aryx","name":"Yoann Padioleau","path":"/aryx","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/332336?s=80&v=4"},"commit":{"message":"more","shortMessageHtmlLink":"more"}},{"before":"e9251cb624fea975245419d4d9b2b52fd8c5dc51","after":"2b668a46c05a0ed0ffca53f14d4112fd75613114","ref":"refs/heads/sync_with_pro","pushedAt":"2024-05-23T07:57:42.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"aryx","name":"Yoann Padioleau","path":"/aryx","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/332336?s=80&v=4"},"commit":{"message":"more","shortMessageHtmlLink":"more"}},{"before":"5cbd4786ef0bc01007241a454a76f1073bb74a48","after":"e9251cb624fea975245419d4d9b2b52fd8c5dc51","ref":"refs/heads/sync_with_pro","pushedAt":"2024-05-23T07:54:51.000Z","pushType":"push","commitsCount":2,"pusher":{"login":"aryx","name":"Yoann Padioleau","path":"/aryx","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/332336?s=80&v=4"},"commit":{"message":"Merge branch 'develop' into sync_with_pro","shortMessageHtmlLink":"Merge branch 'develop' into sync_with_pro"}},{"before":"c7567be383571b1301a1a39cadc8f033c5da715c","after":"128561f10eee2b47cdbad27a4e7cdb97a71b636d","ref":"refs/heads/develop","pushedAt":"2024-05-23T07:52:54.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"aryx","name":"Yoann Padioleau","path":"/aryx","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/332336?s=80&v=4"},"commit":{"message":"Test for sync oss to pro (#10271)\n\ntest plan:\r\nnope","shortMessageHtmlLink":"Test for sync oss to pro (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2312212739\" data-permission-text=\"Title is private\" data-url=\"https://github.com/semgrep/semgrep/issues/10271\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/semgrep/semgrep/pull/10271/hovercard\" href=\"https://github.com/semgrep/semgrep/pull/10271\">#10271</a>)"}},{"before":"f106c838a122fa0751ea310c13575ff466556ae7","after":null,"ref":"refs/heads/for_sync_pro","pushedAt":"2024-05-23T07:52:54.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"aryx","name":"Yoann Padioleau","path":"/aryx","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/332336?s=80&v=4"}},{"before":null,"after":"f106c838a122fa0751ea310c13575ff466556ae7","ref":"refs/heads/for_sync_pro","pushedAt":"2024-05-23T07:51:40.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"aryx","name":"Yoann Padioleau","path":"/aryx","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/332336?s=80&v=4"},"commit":{"message":"Test for sync oss to pro\n\ntest plan:\nnope","shortMessageHtmlLink":"Test for sync oss to pro"}},{"before":"009270cc85b7472427ebdf12c473a8aa32f896f5","after":"5cbd4786ef0bc01007241a454a76f1073bb74a48","ref":"refs/heads/sync_with_pro","pushedAt":"2024-05-23T07:44:52.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"aryx","name":"Yoann Padioleau","path":"/aryx","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/332336?s=80&v=4"},"commit":{"message":"more","shortMessageHtmlLink":"more"}},{"before":"d1b321202f119357ad968716a64a3a08cad9ad58","after":"009270cc85b7472427ebdf12c473a8aa32f896f5","ref":"refs/heads/sync_with_pro","pushedAt":"2024-05-23T07:43:10.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"aryx","name":"Yoann Padioleau","path":"/aryx","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/332336?s=80&v=4"},"commit":{"message":"Iago's feedback","shortMessageHtmlLink":"Iago's feedback"}},{"before":"10d9a802f716cf129b7cecab37d7b0584134dd1f","after":"d1b321202f119357ad968716a64a3a08cad9ad58","ref":"refs/heads/sync_with_pro","pushedAt":"2024-05-22T17:53:36.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"aryx","name":"Yoann Padioleau","path":"/aryx","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/332336?s=80&v=4"},"commit":{"message":"remove x3","shortMessageHtmlLink":"remove x3"}},{"before":"70167a837974d8838758179171fdcd165f35a6be","after":"10d9a802f716cf129b7cecab37d7b0584134dd1f","ref":"refs/heads/sync_with_pro","pushedAt":"2024-05-22T17:52:49.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"aryx","name":"Yoann Padioleau","path":"/aryx","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/332336?s=80&v=4"},"commit":{"message":"comment","shortMessageHtmlLink":"comment"}},{"before":"e8ad276045b5e6900cdfb5fa07171e5a1637e5c5","after":"70167a837974d8838758179171fdcd165f35a6be","ref":"refs/heads/sync_with_pro","pushedAt":"2024-05-22T17:11:46.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"aryx","name":"Yoann Padioleau","path":"/aryx","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/332336?s=80&v=4"},"commit":{"message":"more","shortMessageHtmlLink":"more"}},{"before":"72599d27128b63c5c169f00d2458a0b751483087","after":"e8ad276045b5e6900cdfb5fa07171e5a1637e5c5","ref":"refs/heads/sync_with_pro","pushedAt":"2024-05-22T17:01:28.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"aryx","name":"Yoann Padioleau","path":"/aryx","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/332336?s=80&v=4"},"commit":{"message":"more","shortMessageHtmlLink":"more"}},{"before":"7637e973d1c2565fd2dc6610de03d6e1adfb0c07","after":"72599d27128b63c5c169f00d2458a0b751483087","ref":"refs/heads/sync_with_pro","pushedAt":"2024-05-22T16:56:42.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"aryx","name":"Yoann Padioleau","path":"/aryx","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/332336?s=80&v=4"},"commit":{"message":"more","shortMessageHtmlLink":"more"}},{"before":"116b8c34bd9d476dc29be77133fee7be3debca1e","after":"7637e973d1c2565fd2dc6610de03d6e1adfb0c07","ref":"refs/heads/sync_with_pro","pushedAt":"2024-05-22T16:54:56.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"aryx","name":"Yoann Padioleau","path":"/aryx","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/332336?s=80&v=4"},"commit":{"message":"more","shortMessageHtmlLink":"more"}},{"before":"1b2b3db757e4211b97dbca41b4bfb6c890ec0907","after":"116b8c34bd9d476dc29be77133fee7be3debca1e","ref":"refs/heads/sync_with_pro","pushedAt":"2024-05-22T16:51:59.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"aryx","name":"Yoann Padioleau","path":"/aryx","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/332336?s=80&v=4"},"commit":{"message":"more","shortMessageHtmlLink":"more"}},{"before":"227c472c794193f5187da4823c3eb1ffae0a423d","after":"1b2b3db757e4211b97dbca41b4bfb6c890ec0907","ref":"refs/heads/sync_with_pro","pushedAt":"2024-05-22T16:48:02.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"aryx","name":"Yoann Padioleau","path":"/aryx","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/332336?s=80&v=4"},"commit":{"message":"more","shortMessageHtmlLink":"more"}}],"hasNextPage":true,"hasPreviousPage":false,"activityType":"all","actor":null,"timePeriod":"all","sort":"DESC","perPage":30,"cursor":"djE6ks8AAAAEU0kWkQA","startCursor":null,"endCursor":null}},"title":"Activity · semgrep/semgrep"}