Skip to content

Conversation

@filipecosta90
Copy link
Collaborator

No description provided.

@sonarqubecloud
Copy link

SonarCloud Quality Gate failed.    Quality Gate failed

Bug A 0 Bugs
Vulnerability A 0 Vulnerabilities
Security Hotspot E 16 Security Hotspots
Code Smell A 25 Code Smells

No Coverage information No Coverage information
66.1% 66.1% Duplication


progress = tqdm(unit="docs", total=doc_limit)
all_csvfile = open(setup_fname, "a", newline="")
all_csv_writer = csv.writer(all_csvfile, delimiter=",")
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

opt.semgrep.python.lang.security.unquoted-csv-writer.unquoted-csv-writer: Found an unquoted CSV writer. This is susceptible to injection. Use quoting=csv.QUOTE_ALL.

❗❗ 3 similar findings have been found in this PR

🔎 Expand here to view all instances of this finding
File Path Line Number
scripts/datagen_redisearch/simple_doc_by_id/ftsb_generate_json_singlevalue_numeric.py 280
scripts/datagen_redisearch/simple_doc_by_id/ftsb_generate_simple_doc.py 242
scripts/datagen_redisearch/simple_doc_by_id/ftsb_generate_simple_doc.py 252

Visit the Lift Web Console to find more details in your report.


ℹ️ Expand to see all @sonatype-lift commands

You can reply with the following commands. For example, reply with @sonatype-lift ignoreall to leave out all findings.

Command Usage
@sonatype-lift ignore Leave out the above finding from this PR
@sonatype-lift ignoreall Leave out all the existing findings from this PR
@sonatype-lift exclude <file|issue|path|tool> Exclude specified file|issue|path|tool from Lift findings by updating your config.toml file

Note: When talking to LiftBot, you need to refresh the page to see its response.
Click here to add LiftBot to another repo.


Help us improve LIFT! (Sonatype LiftBot external survey)

Was this a good recommendation for you? Answering this survey will not impact your Lift settings.

[ 🙁 Not relevant ] - [ 😕 Won't fix ] - [ 😑 Not critical, will fix ] - [ 🙂 Critical, will fix ] - [ 😊 Critical, fixing now ]

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants