Skip to content

Add C#, C and C++ code quality and security rules #41

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
heliocodacy wants to merge 4 commits into
base: main
Choose a base branch
from
Open

Add C#, C and C++ code quality and security rules #41

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
3d2c557
Bump Opengrep to v1.31.0
heliocodacy Oct 15, 2026
68ace1b
Support Complexity, UnusedCode and Comprehensibility categories in do…
heliocodacy Oct 15, 2026
e373ca6
Add C# code quality and security rules
heliocodacy Oct 15, 2026
5ac8e64
Add C and C++ correctness and security rules
heliocodacy Oct 15, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
The table of contents is too big for display.
Diff view
Diff view
  •  
  •  
  •  
2 changes: 1 addition & 1 deletion .tool_version
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1 +1 @@
1.30.0
1.31.0
2 changes: 1 addition & 1 deletion Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
ARG OPENGREP_VERSION=v1.30.0
ARG OPENGREP_VERSION=v1.31.0

# Build codacy-opengrep wrapper
FROM golang:1.23-alpine3.21 AS builder
Expand Down
2 changes: 1 addition & 1 deletion README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -45,7 +45,7 @@ This is a **Codacy engine**: a Go wrapper (`cmd/tool`, `internal/tool`, built on

The `docs/` directory holds both hand-maintained inputs and generated outputs:

- `docs/codacy-rules.yaml`, `docs/codacy-rules-i18n.yaml`, `docs/codacy-rules-ai.yaml`, `docs/codacy-rules-exotic.yaml` — Codacy's own custom Semgrep-style rules, hand-maintained, merged in alongside the upstream rule sets.
- `docs/codacy-rules.yaml`, `docs/codacy-rules-i18n.yaml`, `docs/codacy-rules-ai.yaml`, `docs/codacy-rules-exotic.yaml`, `docs/codacy-rules-csharp.yaml`, `docs/codacy-rules-c-cpp.yaml` — Codacy's own custom Semgrep-style rules, hand-maintained, merged in alongside the upstream rule sets. `codacy-rules-csharp.yaml` holds the C# code quality and security rules (`codacy.csharp.<category>.<rule>`); each rule has a test file named after it in `docs/multiple-tests/codacy-rules-csharp/src/`, where `// Noncompliant` comments mark the expected findings (the file-level copyright rule is tested separately in `docs/multiple-tests/codacy-rules-csharp-header/`). `codacy-rules-c-cpp.yaml` holds the C and C++ rules (`codacy.c.<category>.<rule>` for rules shared by both languages, `codacy.cpp.<category>.<rule>` for C++-only rules), tested the same way in `docs/multiple-tests/codacy-rules-c-cpp/src/`.
- `docs/tool-description.md` — short blurb about the tool, hand-maintained.
- `docs/patterns.json`, `docs/description/*.json`, `docs/description/*.md`, `docs/rules.yaml`, `docs/semgrep-pro-rules.yaml` — **generated, git-ignored** (see `.gitignore`: "Ignore generated documentation files to avoid licensing issues"). Do not hand-edit and do not expect to see them in `git status`/PR diffs — they're produced fresh on every `go run ./cmd/docgen` and inside the `Dockerfile` build itself.

Expand Down
Loading