phaneron/Kelsidavis-WoWee
1
0
Fork 0
mirror of https://github.com/Kelsidavis/WoWee.git synced 2026-03-22 15:20:15 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

fix: exclude vendored Lua 5.1.5 from Semgrep security scan

Browse source 
The Semgrep security scan was failing because vendored Lua 5.1.5 source
uses strcpy/strncpy which are flagged as insecure C functions. These are
false positives in frozen third-party code that we don't modify.

Added .semgrepignore to exclude all vendored extern/ directories
(lua-5.1.5, imgui, stb, vk-bootstrap, FidelityFX SDKs).
This commit is contained in:
Kelsi 2026-03-20 12:27:59 -07:00
parent 062cfd1e4a
commit 7d178d00fa
1 changed files with 8 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

8
.semgrepignore Normal file
View file

@ -0,0 +1,8 @@
# Vendored third-party code (frozen releases, not ours to modify)
extern/lua-5.1.5/
extern/imgui/
extern/stb_image.h
extern/stb_image_write.h
extern/vk-bootstrap/
extern/FidelityFX-FSR2/
extern/FidelityFX-SDK/