Improve DS440000 rule
@antrompl is already working on this.
Since May 2, 2023.
Assessment
This issue has not been assessed yet.
Description
The TLS detection rule has too many false positives.
Options
- Replace with language specific detections
- Improve query to require something like
[\.\s\(]before the tls to ensure its not just coincidentally part of a word
- Dominant language
- C#
- Stars
- 1k
- Forks
- 132
- Avg merge
- 1m
- Merged PRs (30d)
- 1
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from microsoft/DevSkim
-
enhancement
Difficulty 4/5 3-5 days Newbie friendliness 52/100
-
enhancement
microsoft/DevSkim#747 · 4 comments · 1 reaction · 2 assignees ·
-
bug
Difficulty 3/5 1-2 days Newbie friendliness 68/100
-
Difficulty 5/5 Over a week Newbie friendliness 35/100
All issues in microsoft/DevSkim
Similar issues
-
type/automation type/tech-debt
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
-
bug
Difficulty 2/5 1-3 hours Newbie friendliness 88/100
-
t/bug
Difficulty 2/5 1-3 hours Newbie friendliness 82/100
-
ci-failure-cause test-failure
Difficulty 2/5 1-3 hours Newbie friendliness 82/100
-
area:auth FE mvp P3
Difficulty 2/5 1-3 hours Newbie friendliness 88/100
klasolsson81/jobbliggaren#1788 ·