Hacktoberfest 2026: the issues maintainers tagged for October, open and beginner-friendly. Browse Hacktoberfest issues

Semgrep Rule ID is Path Based

Open
#48 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Assessment

Difficulty
5/5
Estimated time
Over a week
Newbie friendliness
25/100
Issue type
Bug
Clarity
Needs clarification
Activity status
Stale
Tech stack
github-actions, javascript
Domain
devops, security

Research direction

No files, tests, or entry points are named. Start by locating where Semgrep rule IDs are passed into GitHub Advanced Security and reproduce a rule-path change; done means path changes no longer close existing alerts and create duplicates.

Written by the indexing model from the issue text.

Description

bug

Semgrep's ruleID is based on the path where the rule is stored. This means that as we adjust the path the rule lives in, GitHub advanced security will consider it to be a new rule. This can result in existing alerts being closed, with duplicates opened in their place.

Image
Dominant language
JavaScript
Stars
10
Forks
8
No merged PRs in 30d

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from MetaMask/action-security-code-scanner

All issues in MetaMask/action-security-code-scanner

Similar issues

More JavaScript issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.