mcp-server-semgrep/semgrep-rules/typescript/aws-cdk/security/awscdk-codebuild-project-public.ts

MCP Server for Semgrep Integration - static code analysis with AI

import * as s3 from '@aws-cdk/aws-s3';
import * as cdk from '@aws-cdk/core';
import * as codebuild from '@aws-cdk/aws-codebuild'
import * as rename_codebuild from '@aws-cdk/aws-codebuild'
import {Project, Source} from '@aws-cdk/aws-codebuild'

export class CdkStarterStack extends cdk.Stack {
    constructor(scope: cdk.App, id: string, props?: cdk.StackProps) {
      super(scope, id, props);

      // ruleid:awscdk-codebuild-project-public
      const publicProject1 = new codebuild.Project(this, 'publicProject', {
          badge: true
      })

      const bucket = new s3.Bucket()
      // ok:awscdk-codebuild-project-public
      const privateProject1 = codebuild.Project(this, 'privateProject1', {
        source: codebuild.Source.s3({
            bucket: bucket,
            path: 'path/to/file.zip',
          }),
      })
      // ok:awscdk-codebuild-project-public
      const privateProject2 = codebuild.Project(this, 'privateProject2', {
          badge: false
      })

      // ok:awscdk-codebuild-project-public
      const privateProject3 = codebuild.Project(this, 'privateProject3')

      // ruleid:awscdk-codebuild-project-public
      const publicProject1Renamed = new rename_codebuild.Project(this, 'publicProject', {
        badge: true
      })

      // ok:awscdk-codebuild-project-public
      const privateProject1Renamed = rename_codebuild.Project(this, 'privateProject1', {
        source: rename_codebuild.Source.s3({
            bucket: bucket,
            path: 'path/to/file.zip',
         }),
      })
      // ok:awscdk-codebuild-project-public
      const privateProject2Renamed = rename_codebuild.Project(this, 'privateProject2', {
        badge: false
      })

      // ok:awscdk-codebuild-project-public
      const privateProject3Renamed = rename_codebuild.Project(this, 'privateProject3')

      // ruleid:awscdk-codebuild-project-public
      const publicProject1Direct = new Project(this, 'publicProject', {
        badge: true
      })

      // ok:awscdk-codebuild-project-public
      const privateProject1Direct = Project(this, 'privateProject1', {
        source: Source.s3({
            bucket: bucket,
            path: 'path/to/file.zip',
         }),
      })
      // ok:awscdk-codebuild-project-public
      const privateProject2Direct = Project(this, 'privateProject2', {
        badge: false
      })

      // ok:awscdk-codebuild-project-public
      const privateProject3Direct = Project(this, 'privateProject3')
  }
}