vault/tools/semgrep/logger-sprintf.yml
Vault Automation 0c6c13dd38
license: update headers to IBM Corp. (#10229) (#10233)
* license: update headers to IBM Corp.
* `make proto`
* update offset because source file changed

Signed-off-by: Ryan Cragun <me@ryan.ec>
Co-authored-by: Ryan Cragun <me@ryan.ec>
2025-10-21 15:20:20 -06:00

32 lines
925 B
YAML

# Copyright IBM Corp. 2016, 2025
# SPDX-License-Identifier: BUSL-1.1
rules:
- id: logger-used-with-sprintf
patterns:
- pattern-either:
- pattern: |
logger.Trace(fmt.Sprintf(...))
- pattern: |
logger.Debug(fmt.Sprintf(...))
- pattern: |
logger.Info(fmt.Sprintf(...))
- pattern: |
logger.Warn(fmt.Sprintf(...))
- pattern: |
logger.Error(fmt.Sprintf(...))
- pattern: |
$PARENT.logger.Trace(fmt.Sprintf(...))
- pattern: |
$PARENT.logger.Debug(fmt.Sprintf(...))
- pattern: |
$PARENT.logger.Info(fmt.Sprintf(...))
- pattern: |
$PARENT.logger.Warn(fmt.Sprintf(...))
- pattern: |
$PARENT.logger.Error(fmt.Sprintf(...))
message: "Logger message generated by Sprintf"
languages: [go]
severity: WARNING