style(ci): keep semgrep config focused

This commit is contained in:
Patrick Wozniak
2026-08-25 16:41:23 +02:00
parent f8976adb11
commit dceec74e35
+4 -2
View File
@@ -89,6 +89,8 @@ rules:
- "**/*.ts" - "**/*.ts"
- "**/index.ts" - "**/index.ts"
# ──────────────────────────────────────────────────────────────────────── # ────────────────────────────────────────────────────────────────────────
# Supply chain: dependency injection # Supply chain: dependency injection
# ──────────────────────────────────────────────────────────────────────── # ────────────────────────────────────────────────────────────────────────
@@ -207,8 +209,8 @@ rules:
- id: pi-extension-unusual-import - id: pi-extension-unusual-import
patterns: patterns:
- pattern-either: - pattern-either:
- pattern: 'import $X from "..."' - pattern: "import $X from \"...\""
- pattern: 'const $X = require("...")' - pattern: "const $X = require(\"...\")"
- metavariable-regex: - metavariable-regex:
metavariable: $X metavariable: $X
regex: "(compression|pako|zlib|tar|stream|archiver|request|axios|needle|got|superagent|node-fetch|undici)" regex: "(compression|pako|zlib|tar|stream|archiver|request|axios|needle|got|superagent|node-fetch|undici)"