-
Notifications
You must be signed in to change notification settings - Fork 14
Open
Description
(sorry for the many issues/ideas, love the tool!)
It would be nice if we could export some filtered/boiled-down list of extracted APIs.
The idea is to put the file in git to detect changes in APIs detected over time, flag new attack surfaces.
The Semgrep JSON file is not quite great for that, since it will have variance from simple stuff (line numbers, col, offset of findings, even the lines)
Something like that:
filepath,function,returntype,method,path,authN,authZ
src/somecontroller.java,getUsers,Users,GET,/users,true,true
src/somecontroller.java,getUserById,getUserById,GET,/users/{id},true,false
That way, the file would only change for added/removed paths, or slight changes
Metadata
Metadata
Assignees
Labels
No labels