make tests pass

semgrep · Jun 12, 2024 · 1a868b4 · 1a868b4
1 parent 94b7dab
commit 1a868b4
Show file tree

Hide file tree

Showing 18 changed files with 12 additions and 31 deletions.
diff --git a/ai/generic/detect-anthropic.txt → ai/generic/detect-generic-ai-anthprop.txt b/ai/generic/detect-anthropic.txt → ai/generic/detect-generic-ai-anthprop.txt
@@ -1,15 +1,14 @@
-# ruleid: detect-anthropic
+# ruleid: detect-generic-ai-anthprop
 import anthropic
 
-# ruleid: detect-anthropic
+# ruleid: detect-generic-ai-anthprop
 client = anthropic.Anthropic(
-	# ruleid: detect-anthropic
     # defaults to os.environ.get("ANTHROPIC_API_KEY")
     api_key="my_api_key",
 )
 
 message = client.messages.create(
-	# ruleid: detect-anthropic
+	# ruleid: detect-generic-ai-anthprop
     model="claude-3-opus-20240229",
     max_tokens=1024,
     messages=[

diff --git a/ai/generic/detect-anthropic.yaml → ai/generic/detect-generic-ai-anthprop.yaml b/ai/generic/detect-anthropic.yaml → ai/generic/detect-generic-ai-anthprop.yaml
@@ -1,15 +1,13 @@
 rules:
-  - id: detect-anthropic
+  - id: detect-generic-ai-anthprop
     languages:
       - generic
     severity: INFO
     message: "Possibly found usage of AI: Anthropic"
     pattern-either:
       - pattern: anthropic
       - pattern: Anthropic
-      - pattern: ANTHROPIC_API_KEY
       - pattern: claude
-      - pattern: CLAUDE_API_KEY
     metadata:
       references:
         - http://semgrep.dev/blog/2024/detecting-shadow-ai

diff --git a/ai/generic/detect-gemini.html → ai/generic/detect-generic-ai-gem.html b/ai/generic/detect-gemini.html → ai/generic/detect-generic-ai-gem.html
@@ -1,17 +1,17 @@
 <html>
 <body>
   <!-- ... Your HTML and CSS -->
-  // ruleid: detect-gemini
+  // ruleid: detect-generic-ai-gem
   <!-- Import @google/generative-ai, as shown above. -->
   <script type="module">
-  	  // ruleid: detect-gemini
+  	  // ruleid: detect-generic-ai-gem
       import { GoogleGenerativeAI } from "@google/generative-ai";
 
       // Fetch your API_KEY
       const API_KEY = "...";
 
       // Access your API key (see "Set up your API key" above)
-	  // ruleid: detect-gemini
+	  // ruleid: detect-generic-ai-gem
       const genAI = new GoogleGenerativeAI(API_KEY);
 
       const model = genAI.getGenerativeModel({ model: "gemini-1.5-flash"});

diff --git a/ai/generic/detect-gemini.yaml → ai/generic/detect-generic-ai-gem.yaml b/ai/generic/detect-gemini.yaml → ai/generic/detect-generic-ai-gem.yaml
@@ -1,5 +1,5 @@
 rules:
-  - id: detect-gemini
+  - id: detect-generic-ai-gem
     languages:
       - generic
     severity: INFO

diff --git a/ai/generic/detect-openai.txt → ai/generic/detect-generic-ai-oai.txt b/ai/generic/detect-openai.txt → ai/generic/detect-generic-ai-oai.txt
@@ -1,9 +1,7 @@
-# ruleid: detect-openai
 OPENAI_API_KEY = "MY_API_KEY"
-# ruleid: detect-openai
+# ruleid: detect-generic-ai-oai
 from openai import OpenAI
-# ruleid: detect-openai
+# ruleid: detect-generic-ai-oai
 client = OpenAI(
-    # ruleid: detect-openai
     # Defaults to os.environ.get("OPENAI_API_KEY")
 )
diff --git a/ai/generic/detect-openai.yaml → ai/generic/detect-generic-ai-oai.yaml b/ai/generic/detect-openai.yaml → ai/generic/detect-generic-ai-oai.yaml
@@ -1,13 +1,12 @@
 rules:
-  - id: detect-openai
+  - id: detect-generic-ai-oai
     languages:
       - generic
     severity: INFO
     message: "Possibly found usage of AI: OpenAI"
     pattern-either:
       - pattern: openai
       - pattern: OpenAI
-      - pattern: OPENAI_API_KEY
     metadata:
       references:
         - http://semgrep.dev/blog/2024/detecting-shadow-ai

diff --git a/ai/python/detect-anthropic.yaml b/ai/python/detect-anthropic.yaml
@@ -10,8 +10,6 @@ rules:
       - pattern: Anthropic(...)
       - pattern: anthropic.Anthropic(...)
       - pattern: $CLIENT.messages.$FUNC(...,model=...,...)
-      - pattern: ANTHROPIC_API_KEY = ...
-      - pattern: CLAUDE_API_KEY = ...
     metadata:
       references:
         - http://semgrep.dev/blog/2024/detecting-shadow-ai

diff --git a/ai/python/detect-gemini.yaml b/ai/python/detect-gemini.yaml
@@ -6,7 +6,6 @@ rules:
     message: "Possibly found usage of AI: Gemini"
     pattern-either:
       - pattern: import google.generativeai
-      - pattern: GEMINI_API_KEY = ...
     metadata:
       references:
         - http://semgrep.dev/blog/2024/detecting-shadow-ai

diff --git a/ai/python/detect-langchain.py b/ai/python/detect-langchain.py
@@ -6,6 +6,7 @@
 
 # ruleid: detect-langchain
 from langchain_community.llms import Ollama
+# ruleid: detect-langchain
 llm = Ollama(model="llama2")
 
 # ruleid: detect-langchain

diff --git a/ai/python/detect-mistral.yaml b/ai/python/detect-mistral.yaml
@@ -8,7 +8,6 @@ rules:
       - pattern: import mistralai
       - pattern: MistralClient(...)
       - pattern: $CLIENT.chat(...,model=...,...)
-      - pattern: MISTRAL_API_KEY = ...
     metadata:
       references:
         - http://semgrep.dev/blog/2024/detecting-shadow-ai

diff --git a/ai/python/detect-openai.py b/ai/python/detect-openai.py
@@ -1,4 +1,3 @@
-# ruleid: detect-openai
 OPENAI_API_KEY = "MY_API_KEY"
 # ruleid: detect-openai
 from openai import OpenAI

diff --git a/ai/python/detect-openai.yaml b/ai/python/detect-openai.yaml
@@ -9,7 +9,6 @@ rules:
       - pattern: from openai import $ANYTHING
       - pattern: OpenAI(...)
       - pattern: $CLIENT.chat.completions.$FUNC(...)
-      - pattern: OPENAI_API_KEY = ...
     metadata:
       references:
         - http://semgrep.dev/blog/2024/detecting-shadow-ai

diff --git a/ai/typescript/detect-anthropic.yaml b/ai/typescript/detect-anthropic.yaml
@@ -10,8 +10,6 @@ rules:
       - pattern: import $ANYTHING from "@anthropic-ai";
       - pattern: new Anthropic(...)
       - pattern: anthropic.messages.$FUNC(...)
-      - pattern: ANTHROPIC_API_KEY = ...
-      - pattern: CLAUDE_API_KEY = ...
     metadata:
       references:
         - http://semgrep.dev/blog/2024/detecting-shadow-ai

diff --git a/ai/typescript/detect-gemini.yaml b/ai/typescript/detect-gemini.yaml
@@ -10,7 +10,6 @@ rules:
       - pattern: import $ANYTHING from "@google/generative-ai";
       - pattern: new GoogleGenerativeAI(...)
       - pattern: $GENAI.getGenerativeModel(...)
-      - pattern: GEMINI_API_KEY = ...
     metadata:
       references:
         - http://semgrep.dev/blog/2024/detecting-shadow-ai

diff --git a/ai/typescript/detect-mistral.ts b/ai/typescript/detect-mistral.ts
@@ -1,7 +1,6 @@
 // ruleid: detect-mistral
 import MistralClient from '@mistralai/mistralai';
 
-// ruleid: detect-mistral
 const apiKey = process.env.MISTRAL_API_KEY;
 
 // ruleid: detect-mistral

diff --git a/ai/typescript/detect-mistral.yaml b/ai/typescript/detect-mistral.yaml
@@ -10,8 +10,6 @@ rules:
       - pattern: new MistralClient(...)
       - pattern: |-
           $CLIENT.chat({model: ...})
-      - pattern: MISTRAL_API_KEY = ...
-      - pattern: process.env.MISTRAL_API_KEY
     metadata:
       references:
         - http://semgrep.dev/blog/2024/detecting-shadow-ai

diff --git a/ai/typescript/detect-openai.ts b/ai/typescript/detect-openai.ts
@@ -1,7 +1,6 @@
 // ruleid: detect-openai
 import OpenAI from "openai";
 
-// ruleid: detect-openai
 OPENAI_API_KEY = "asdf"
 
 // ruleid: detect-openai

diff --git a/ai/typescript/detect-openai.yaml b/ai/typescript/detect-openai.yaml
@@ -10,7 +10,6 @@ rules:
       - pattern: import $ANYTHING from "openai";
       - pattern: new OpenAI(...)
       - pattern: $CLIENT.chat.completions.$FUNC(...)
-      - pattern: OPENAI_API_KEY = ...
     metadata:
       references:
         - http://semgrep.dev/blog/2024/detecting-shadow-ai