Alexandre Gigleux

Results 26 issues of Alexandre Gigleux

I analyzed https://github.com/montulli/GrooveScribe. There are [2 similar bug issues](https://sonarcloud.io/project/issues?id=agigleux_GrooveScribe&open=AXxeqUCf-dDKUnsQ_Kej&resolutions=FALSE-POSITIVE&types=BUG) that are suspicious: the software is working well and should really behave wrongly if what SonarCloud reports is correct. ![image](https://user-images.githubusercontent.com/1057037/136561025-46b6c287-902c-4833-ae4c-2b38e30ab95c.png) If...

type: false positive

S5659 should detect the use of the JWK.None / empty algorithm on the following functions: [JWT.sign(payload, key[, options])](https://github.com/panva/jose/blob/HEAD/docs/README.md#jwtsignpayload-key-options) * `algorithm` property should be provided with a strong cipher [JWT.verify(token, keyOrStore[,...

type: enhancement
type: false negative
topic: security

RSPEC-1524 is deprecated and RSPEC-1117 was made more generic.

enhancement

In order to assess the maturity of a SAST product, it's important to know which issues are hidden in benchmark such as this repo. It would be great to provide...

Implements [RSPEC-1067](https://jira.sonarsource.com/browse/RSPEC-1067)

new-rule
ready

Implements [RSPEC-4143](https://jira.sonarsource.com/browse/RSPEC-4143)

new-rule
ready

Implements [RSPEC-1144](https://jira.sonarsource.com/browse/RSPEC-1144)

new-rule

Implements [RSPEC-1075](https://jira.sonarsource.com/browse/RSPEC-1075)

new-rule
ready

Implements [RSPEC-2234](https://jira.sonarsource.com/browse/RSPEC-2234)

new-rule
requires semantic