I have a Semgrep rule:
rules:
  - id: create-chat-client
    patterns:
      - pattern: var $X = GrpcChannel.ForAddress(...); 
      - pattern: var $Y = new ChatService.ChatServiceClient($X);
    languages: 
      - csharp
    message: <pass>
    severity: INFO
And I am trying to match this code:
using Grpc.Net.Client;
using GrpcChat.ProtoBuf;
var channel = GrpcChannel.ForAddress("https://localhost:8888");
var client = new ChatService.ChatServiceClient(channel);
These match separately, but the 'patterns' should be a "AND" match and it fails. I must be missing something obvious. Anyone see anything?
Using pattern-inside works:
rules:
  - id: chat
    patterns:
      - pattern-inside: |
          var $X = GrpcChannel.ForAddress(...); 
          ...
      - pattern: var $Y = new ChatService.ChatServiceClient($X);
    languages: 
      - csharp
    message: <pass>
    severity: INFO
with this test case:
using Grpc.Net.Client;
using GrpcChat.ProtoBuf;
var channel = GrpcChannel.ForAddress("https://localhost:8888");
// ruleid: chat
var client = new ChatService.ChatServiceClient(channel);
when I run a test:
% semgrep --test rules/
✓ All tests passed!
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With