Create security

[sjainda]

for polyfill compromise

[CLAassistant]

All committers have signed the CLA.

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}

[0xDC0DE]

This looks like an exact copy of the rule we shared.

[sjainda]

Yes it is, how do I get this added to the develop branch so I am able to use it in my scans. From: Pieter De Cremer (Semgrep) ***@***.***> Date: Monday, 8 July 2024 at 2:02 PM To: semgrep/semgrep-rules ***@***.***> Cc: Surabhi Jain ***@***.***>, Author ***@***.***> Subject: Re: [semgrep/semgrep-rules] Create security (PR #3421) CAUTION: This email is from outside of the organization. Do not click links or open attachments unless you know the content is safe. This looks like an exact copy of the rule we shared. — Reply to this email directly, view it on GitHub<#3421 (comment)>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/AYVUXWRO3Y6UOYXUQD32E5TZLJFCVAVCNFSM6AAAAABKMSC7NGVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDEMJTGM3DKOJSGE>. You are receiving this because you authored the thread.Message ID: ***@***.***>

[0xDC0DE]

Hi @sjainda,

I don't know if this rule is going to be added to the registry, it probably should!

If you are asking how to use a rule in a scan, you can find more information in our docs: https://semgrep.dev/docs/semgrep-code/editor#add-a-rule-to-the-policies-page

It's probably good to head to our community slack channel for further questions!