diff --git a/.semgrep/pi-extension-audit.yaml b/.semgrep/pi-extension-audit.yaml index 750ebf6..120a0ec 100644 --- a/.semgrep/pi-extension-audit.yaml +++ b/.semgrep/pi-extension-audit.yaml @@ -89,6 +89,8 @@ rules: - "**/*.ts" - "**/index.ts" + + # ──────────────────────────────────────────────────────────────────────── # Supply chain: dependency injection # ──────────────────────────────────────────────────────────────────────── @@ -207,8 +209,8 @@ rules: - id: pi-extension-unusual-import patterns: - pattern-either: - - pattern: 'import $X from "..."' - - pattern: 'const $X = require("...")' + - pattern: "import $X from \"...\"" + - pattern: "const $X = require(\"...\")" - metavariable-regex: metavariable: $X regex: "(compression|pako|zlib|tar|stream|archiver|request|axios|needle|got|superagent|node-fetch|undici)"