From ac1bb636cf86490702dc6330d4c7e01937bb5d13 Mon Sep 17 00:00:00 2001 From: Ankush Menat Date: Mon, 18 Oct 2021 22:11:38 +0530 Subject: [PATCH] ci: flag new instances of sql_ddl and sql_list --- .github/helper/semgrep_rules/frappe_correctness.yml | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/.github/helper/semgrep_rules/frappe_correctness.yml b/.github/helper/semgrep_rules/frappe_correctness.yml index 662e6e8022..1297d7fa67 100644 --- a/.github/helper/semgrep_rules/frappe_correctness.yml +++ b/.github/helper/semgrep_rules/frappe_correctness.yml @@ -133,8 +133,11 @@ rules: severity: ERROR - id: frappe-using-db-sql - pattern: frappe.db.sql(...) + pattern-either: + - pattern: frappe.db.sql(...) + - pattern: frappe.db.sql_ddl(...) + - pattern: frappe.db.sql_list(...) message: | The PR contains a SQL query that may be re-written with frappe.qb (https://frappeframework.com/docs/user/en/api/query-builder) or the Database API (https://frappeframework.com/docs/user/en/api/database) languages: [python] - severity: ERROR \ No newline at end of file + severity: ERROR