eslint-plugin-test-signal/.devskim.json at main · Nick2bad4u/eslint-plugin-test-signal · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
{
    "$schema": "https://www.schemastore.org/any.json",
    "AbsolutePaths": false,
    "BasePath": "",
    "CacheLocation": ".devskim-cache",
    "CommentsPath": "",
    "Confidences": [
        "High",
        "Medium",
        "Low"
    ],
    "ConsoleVerbosityLevel": "Information",
    "CrawlArchives": false,
    "DisableConsoleOutput": false,
    "DisableParallel": false,
    "DisableSuppression": false,
    "EnableCaching": true,
    "ExitCodeIsNumIssues": true,
    "Globs": [
        ".devskim.json",
        ".vscode/settings.json",
        "**/.git/**",
        "**/**.xml",
        "**/build/**",
        "**/coverage/**",
        "**/dist/**",
        "**/docs/TSDoc/**",
        "**/libs/**",
        "**/megalinter-reports/**",
        "**/node_modules/**",
        "**/out/**",
        "**/release/**",
        "**/test-results/**",
        "**/test/**",
        "**/tests/**",
        "**/tmp/**",
        "**/assets/**/*.wasm",
        "**/*.min.js",
        "**/*.min.css",
        "**/*.map",
        "**/*.snap",
        "**/*.log",
        "**/package-lock.json",
        "**/yarn.lock",
        "**/pnpm-lock.yaml",
        "coverage-results.json",
        "**/.next/**",
        "**/.nuxt/**",
        "**/.svelte-kit/**",
        "**/target/**",
        "**/.cache/**",
        "**/.vite/**",
        "**/tsconfig.*.tsbuildinfo",
        "**/*.d.ts.map",
        "**/.turbo/**",
        "**/public/workbox-*.js",
        "**/sw.js",
        "**/service-worker.js"
    ],
    "IgnoreDefaultRules": false,
    "IgnoreRuleIds": ["DS162092"],
    "LanguageRuleIgnoreMap": {
        "typescript": ["DS172411"],
        "javascript": ["DS172411"],
        "react": [],
        "jsx": []
    },
    "LanguagesPath": "",
    "LogFileLevel": "Warning",
    "LogFilePath": "devskim.log",
    "MaxDepth": 50,
    "OutputFile": "devskim-report.sarif",
    "OutputFileFormat": "sarif",
    "OutputTextFormat": "%F:%L:%C [%S] %R - %N",
    "RespectGitIgnore": true,
    "RuleIds": [],
    "Rules": [],
    "Severities": [
        "Critical",
        "Important",
        "Moderate",
        "BestPractice",
        "ManualReview"
    ],
    "SkipExcerpts": false,
    "Suppressions": [
        {
            "Justification": "False positive: localhost redirect URI is required for OAuth dev flow (only present in development builds, not production)",
            "FilePattern": "**/exportUtils.js",
            "LineNumber": 359,
            "RuleId": "DS162092"
        },
        {
            "Justification": "Development-only: Binding server to localhost is required for secure local OAuth testing. This code is not present in production builds, and does not expose any security risk in release artifacts.",
            "FilePattern": "**/main.js",
            "LineNumber": 801,
            "RuleId": "DS162092"
        },
        {
            "Justification": "Development-only: Checking for localhost is required for dev/debug logic. This code is not present in production builds.",
            "FilePattern": "**/renderer.js",
            "LineNumber": 58,
            "RuleId": "DS162092"
        },
        {
            "Justification": "Development-only: Checking for 127.0.0.1 is required for dev/debug logic. This code is not present in production builds.",
            "FilePattern": "*",
            "RuleId": "DS162092"
        },
        {
            "Justification": "Manual review: 'http://localhost/' is used in test context for ScreenshotThumbnail. This is not production code.",
            "FilePattern": "src/test/ScreenshotThumbnail.test.tsx",
            "LineNumber": 87,
            "RuleId": "DS162092"
        },
        {
            "Justification": "Manual review: 'http://localhost:5173' is used for development server URL, not present in production builds.",
            "FilePattern": "electron/services/window/WindowService.ts",
            "LineNumber": 73,
            "RuleId": "DS162092"
        },
        {
            "Justification": "Manual review: setTimeout is used in controlled contexts with fixed timeouts for legitimate development/testing purposes, not with untrusted data.",
            "FilePattern": "electron/services/window/WindowService.ts",
            "RuleId": "DS172411"
        },
        {
            "Justification": "Electron preload security: nodeIntegration is disabled and contextIsolation is enabled for security. This is Electron best practice.",
            "FilePattern": "electron/main.ts",
            "RuleId": "DS172412"
        },
        {
            "Justification": "Electron security: webSecurity is enabled in production builds. Development mode requires it disabled for local file access.",
            "FilePattern": "electron/services/window/**",
            "RuleId": "DS172413"
        }
    ]
}