{"version":"1.177.0","results":[{"check_id":"semgrep-offline.rules.scan.python.lang.correctness.unchecked-subprocess-call","path":"semgrep-offline/examples/unsafe.py","start":{"line":4,"col":12,"offset":104},"end":{"line":4,"col":16,"offset":108},"extra":{"message":"This is not checking the return value of this subprocess call; if it fails no exception will be raised. Consider subprocess.check_call() instead","fix":"check_call","metadata":{"references":["https://docs.python.org/3/library/subprocess.html#subprocess.check_call"],"category":"correctness","technology":["python"]},"severity":"WARNING","fingerprint":"requires login","lines":"requires login","validation_state":"NO_VALIDATOR","engine_kind":"OSS"}}],"errors":[{"code":0,"level":"info","type":"Missing plugin","rule_id":"semgrep-offline.rules.scan.apex.lang.security.ncino.endpoints.insecure-http-request","message":"Missing plugin for rule semgrep-offline.rules.scan.apex.lang.security.ncino.endpoints.insecure-http-request:\n Missing Semgrep extension needed for parsing Apex target. Try adding `--pro-languages` to your command.","path":"/tmp/tmplnghydst.json"},{"code":0,"level":"info","type":"Missing plugin","rule_id":"semgrep-offline.rules.scan.apex.lang.security.ncino.endpoints.named-credentials-constant-match","message":"Missing plugin for rule semgrep-offline.rules.scan.apex.lang.security.ncino.endpoints.named-credentials-constant-match:\n Missing Semgrep extension needed for parsing Apex target. Try adding `--pro-languages` to your command.","path":"/tmp/tmplnghydst.json"},{"code":0,"level":"info","type":"Missing plugin","rule_id":"semgrep-offline.rules.scan.apex.lang.security.ncino.system.system-debug","message":"Missing plugin for rule semgrep-offline.rules.scan.apex.lang.security.ncino.system.system-debug:\n Missing Semgrep extension needed for parsing Apex target. Try adding `--pro-languages` to your command.","path":"/tmp/tmplnghydst.json"},{"code":0,"level":"info","type":"Missing plugin","rule_id":"semgrep-offline.rules.scan.elixir.lang.best-practice.deprecated_bnot_operator","message":"Missing plugin for rule semgrep-offline.rules.scan.elixir.lang.best-practice.deprecated_bnot_operator:\n Missing Semgrep extension needed for parsing Elixir target. Try adding `--pro-languages` to your command.","path":"/tmp/tmplnghydst.json"},{"code":0,"level":"info","type":"Missing plugin","rule_id":"semgrep-offline.rules.scan.elixir.lang.best-practice.enum_map_into","message":"Missing plugin for rule semgrep-offline.rules.scan.elixir.lang.best-practice.enum_map_into:\n Missing Semgrep extension needed for parsing Elixir target. Try adding `--pro-languages` to your command.","path":"/tmp/tmplnghydst.json"},{"code":0,"level":"info","type":"Missing plugin","rule_id":"semgrep-offline.rules.scan.apex.lang.security.ncino.sharing.specify-sharing-level","message":"Missing plugin for rule semgrep-offline.rules.scan.apex.lang.security.ncino.sharing.specify-sharing-level:\n Missing Semgrep extension needed for parsing Apex target. Try adding `--pro-languages` to your command.","path":"/tmp/tmpvy9s3_za.json"},{"code":0,"level":"info","type":"Missing plugin","rule_id":"semgrep-offline.rules.scan.apex.lang.security.ncino.injection.soql-injection-unescaped-url-param","message":"Missing plugin for rule semgrep-offline.rules.scan.apex.lang.security.ncino.injection.soql-injection-unescaped-url-param:\n Missing Semgrep extension needed for parsing Apex target. Try adding `--pro-languages` to your command.","path":"/tmp/tmpvy9s3_za.json"},{"code":0,"level":"info","type":"Missing plugin","rule_id":"semgrep-offline.rules.scan.apex.lang.security.ncino.injection.soql-injection-unescaped-param","message":"Missing plugin for rule semgrep-offline.rules.scan.apex.lang.security.ncino.injection.soql-injection-unescaped-param:\n Missing Semgrep extension needed for parsing Apex target. Try adding `--pro-languages` to your command.","path":"/tmp/tmpvy9s3_za.json"},{"code":0,"level":"info","type":"Missing plugin","rule_id":"semgrep-offline.rules.scan.apex.lang.security.ncino.dml.dml-native-statements","message":"Missing plugin for rule semgrep-offline.rules.scan.apex.lang.security.ncino.dml.dml-native-statements:\n Missing Semgrep extension needed for parsing Apex target. Try adding `--pro-languages` to your command.","path":"/tmp/tmpvy9s3_za.json"},{"code":0,"level":"info","type":"Missing plugin","rule_id":"semgrep-offline.rules.scan.apex.lang.best-practice.ncino.accessModifiers.global-access-modifiers","message":"Missing plugin for rule semgrep-offline.rules.scan.apex.lang.best-practice.ncino.accessModifiers.global-access-modifiers:\n Missing Semgrep extension needed for parsing Apex target. Try adding `--pro-languages` to your command.","path":"/tmp/tmpvy9s3_za.json"},{"code":0,"level":"info","type":"Missing plugin","rule_id":"semgrep-offline.rules.scan.apex.lang.security.ncino.dml.apex-csrf-constructor","message":"Missing plugin for rule semgrep-offline.rules.scan.apex.lang.security.ncino.dml.apex-csrf-constructor:\n Missing Semgrep extension needed for parsing Apex target. Try adding `--pro-languages` to your command.","path":"/tmp/tmpvy9s3_za.json"},{"code":0,"level":"info","type":"Missing plugin","rule_id":"semgrep-offline.rules.scan.apex.lang.security.ncino.encryption.bad-crypto","message":"Missing plugin for rule semgrep-offline.rules.scan.apex.lang.security.ncino.encryption.bad-crypto:\n Missing Semgrep extension needed for parsing Apex target. Try adding `--pro-languages` to your command.","path":"/tmp/tmpvy9s3_za.json"},{"code":0,"level":"info","type":"Missing plugin","rule_id":"semgrep-offline.rules.scan.apex.lang.security.ncino.endpoints.named-credentials-string-match","message":"Missing plugin for rule semgrep-offline.rules.scan.apex.lang.security.ncino.endpoints.named-credentials-string-match:\n Missing Semgrep extension needed for parsing Apex target. Try adding `--pro-languages` to your command.","path":"/tmp/tmpvy9s3_za.json"},{"code":0,"level":"info","type":"Missing plugin","rule_id":"semgrep-offline.rules.scan.apex.lang.best-practice.ncino.urls.absolute-urls","message":"Missing plugin for rule semgrep-offline.rules.scan.apex.lang.best-practice.ncino.urls.absolute-urls:\n Missing Semgrep extension needed for parsing Apex target. Try adding `--pro-languages` to your command.","path":"/tmp/tmpvy9s3_za.json"},{"code":0,"level":"info","type":"Missing plugin","rule_id":"semgrep-offline.rules.scan.elixir.lang.best-practice.deprecated_bxor_operator","message":"Missing plugin for rule semgrep-offline.rules.scan.elixir.lang.best-practice.deprecated_bxor_operator:\n Missing Semgrep extension needed for parsing Elixir target. Try adding `--pro-languages` to your command.","path":"/tmp/tmpvy9s3_za.json"},{"code":0,"level":"info","type":"Missing plugin","rule_id":"semgrep-offline.rules.scan.elixir.lang.best-practice.enum_map_join","message":"Missing plugin for rule semgrep-offline.rules.scan.elixir.lang.best-practice.enum_map_join:\n Missing Semgrep extension needed for parsing Elixir target. Try adding `--pro-languages` to your command.","path":"/tmp/tmpvy9s3_za.json"},{"code":0,"level":"info","type":"Missing plugin","rule_id":"semgrep-offline.rules.scan.elixir.lang.best-practice.deprecated_use_bitwise","message":"Missing plugin for rule semgrep-offline.rules.scan.elixir.lang.best-practice.deprecated_use_bitwise:\n Missing Semgrep extension needed for parsing Elixir target. Try adding `--pro-languages` to your command.","path":"/tmp/tmpvy9s3_za.json"},{"code":0,"level":"info","type":"Missing plugin","rule_id":"semgrep-offline.rules.scan.elixir.lang.correctness.atom_exhaustion","message":"Missing plugin for rule semgrep-offline.rules.scan.elixir.lang.correctness.atom_exhaustion:\n Missing Semgrep extension needed for parsing Elixir target. Try adding `--pro-languages` to your command.","path":"/tmp/tmpvy9s3_za.json"},{"code":0,"level":"info","type":"Missing plugin","rule_id":"semgrep-offline.rules.scan.elixir.lang.best-practice.deprecated_calendar_iso_day_of_week_3","message":"Missing plugin for rule semgrep-offline.rules.scan.elixir.lang.best-practice.deprecated_calendar_iso_day_of_week_3:\n Missing Semgrep extension needed for parsing Elixir target. Try adding `--pro-languages` to your command.","path":"/tmp/tmpvy9s3_za.json"}],"paths":{"scanned":["semgrep-offline/examples/unsafe.py"]},"time":{"rules":[],"rules_parse_time":0.37552785873413086,"profiling_times":{"config_time":26.661889791488647,"core_time":9.646728754043579,"ignores_time":0.0022623538970947266,"total_time":36.31906318664551},"parsing_time":{"total_time":0.0,"per_file_time":{"mean":0.0,"std_dev":0.0},"very_slow_stats":{"time_ratio":0.0,"count_ratio":0.0},"very_slow_files":[]},"scanning_time":{"total_time":0.009781122207641602,"per_file_time":{"mean":0.003260374069213867,"std_dev":1.4193527173726276e-05},"very_slow_stats":{"time_ratio":0.0,"count_ratio":0.0},"very_slow_files":[]},"matching_time":{"total_time":0.0,"per_file_and_rule_time":{"mean":0.0,"std_dev":0.0},"very_slow_stats":{"time_ratio":0.0,"count_ratio":0.0},"very_slow_rules_on_files":[]},"tainting_time":{"total_time":0.0,"per_def_and_rule_time":{"mean":0.0,"std_dev":0.0},"very_slow_stats":{"time_ratio":0.0,"count_ratio":0.0},"very_slow_rules_on_defs":[]},"fixpoint_timeouts":[],"prefiltering":{"project_level_time":0.0,"file_level_time":0.0,"rules_with_project_prefilters_ratio":0.0,"rules_with_file_prefilters_ratio":0.960960960960961,"rules_selected_ratio":0.052552552552552555,"rules_matched_ratio":0.052552552552552555},"targets":[],"total_bytes":0,"max_memory_bytes":910503168},"engine_requested":"OSS","skipped_rules":[],"profiling_results":[]}