From dceec74e35fd6ee157a5bda3c77479ac7739abcd Mon Sep 17 00:00:00 2001 From: Patrick Wozniak Date: Tue, 25 Aug 2026 16:41:23 +0200 Subject: [PATCH] style(ci): keep semgrep config focused --- .semgrep/pi-extension-audit.yaml | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/.semgrep/pi-extension-audit.yaml b/.semgrep/pi-extension-audit.yaml index 750ebf6..120a0ec 100644 --- a/.semgrep/pi-extension-audit.yaml +++ b/.semgrep/pi-extension-audit.yaml @@ -89,6 +89,8 @@ rules: - "**/*.ts" - "**/index.ts" + + # ──────────────────────────────────────────────────────────────────────── # Supply chain: dependency injection # ──────────────────────────────────────────────────────────────────────── @@ -207,8 +209,8 @@ rules: - id: pi-extension-unusual-import patterns: - pattern-either: - - pattern: 'import $X from "..."' - - pattern: 'const $X = require("...")' + - pattern: "import $X from \"...\"" + - pattern: "const $X = require(\"...\")" - metavariable-regex: metavariable: $X regex: "(compression|pako|zlib|tar|stream|archiver|request|axios|needle|got|superagent|node-fetch|undici)"