mirror of
https://github.com/Kelsidavis/WoWee.git
synced 2026-03-22 15:20:15 +00:00
The Semgrep security scan was failing because vendored Lua 5.1.5 source uses strcpy/strncpy which are flagged as insecure C functions. These are false positives in frozen third-party code that we don't modify. Added .semgrepignore to exclude all vendored extern/ directories (lua-5.1.5, imgui, stb, vk-bootstrap, FidelityFX SDKs).
8 lines
210 B
Text
8 lines
210 B
Text
# Vendored third-party code (frozen releases, not ours to modify)
|
|
extern/lua-5.1.5/
|
|
extern/imgui/
|
|
extern/stb_image.h
|
|
extern/stb_image_write.h
|
|
extern/vk-bootstrap/
|
|
extern/FidelityFX-FSR2/
|
|
extern/FidelityFX-SDK/
|