mcp-server-semgrep/semgrep-rules/yaml/semgrep/duplicate-pattern.test.yaml

MCP Server for Semgrep Integration - static code analysis with AI

rules:
  - id: unchecked-subprocess-call
    patterns:
      - pattern-either:
          # ruleid: duplicate-pattern
          - pattern: |
              subprocess.call(...)
            # ruleid: duplicate-pattern
          - pattern: |
              subprocess.call(...)
      - pattern-not-inside: |
          $S = subprocess.call(...)
      - pattern-not-inside: |
          subprocess.call(...) == $X
    message: >-
      This is not checking the return value of this subprocess call; if it fails no exception will be raised. Consider subprocess.check_call() instead
    languages: [python]
    severity: WARNING
    fix: subprocess.check_call(...)