mirror of
https://github.com/BerriAI/litellm.git
synced 2026-08-28 05:25:59 +00:00
f32322cd41
- Add organizing rules (language/domain structure, naming, metadata) - Require all rules to fail CI (severity: ERROR, no warn-only) - Move unbounded-memory.yml to python/reliability/ per structure - Enhance unbounded-memory rule metadata (tags, confidence, source)
22 lines
576 B
Markdown
22 lines
576 B
Markdown
# Custom Semgrep rules for LiteLLM
|
||
|
||
Add custom rule YAML files here. Semgrep loads all `.yml`/`.yaml` files under this directory.
|
||
|
||
**Run only custom rules (CI / fail on findings):**
|
||
|
||
```bash
|
||
semgrep scan --config .semgrep/rules . --error
|
||
```
|
||
|
||
**Run with registry + custom rules:**
|
||
|
||
```bash
|
||
semgrep scan --config auto --config .semgrep/rules .
|
||
```
|
||
|
||
**Layout:**
|
||
|
||
- `python/` – Python-specific rules (security, patterns)
|
||
- Add more subdirs as needed (e.g. `generic/` for language-agnostic rules)
|
||
|
||
See [Semgrep rule syntax](https://semgrep.dev/docs/writing-rules/rule-syntax/).
|