semgrep/semgrep v0.13.0

Release v0.13.0

on GitHub

Added

• Const propagation now works with Java 'final' keyword and for Python globals
  which were assigned only once in the program

Fixed

• Parsing Ocaml open overriding
• Parse raise in Python2 can take up to three arguments
• Metavariable matching now works with variables with global scope:

$CONST = "..."
...
def $FUNC(...):
  return foo($CONST)

will match

GLOBAL_CONST = "SOME_CONST"

def fetch_global_const():
    return foo(GLOBAL_CONST)

Changed

• More clear Parse error message