static-analysis

App Attest allows your app to attach a hardware-backed assertion as a part of the request. Your server can use assertion to verify the request came from your genuine app, on a genuine Apple device.

https://developer.apple.com/videos/play/wwdc2021/10244/

https://developer.apple.com/documentation/devicecheck/assessing_fraud_risk

https://developer.apple.com/documentation/bundleresources/entit

Describe the bug

I expect metavariables between backticks to work in JavaScript:

$ semgrep --lang js -e '`$A`'
ran 1 rules on 1 files: 0 findings

I expect this to match the following:

`test`;

Priority
How important is this to you?

• P2: annoying but not blocking me

Wasn't sure if this is the sort of thing that should be overridden in the xdebug stub or if it can be pulled from elsewhere...

It looks like psalm assumes a return type of string for xdebug_get_profiler_filename(), but it should be string|false (https://xdebug.org/docs/profiler#xdebug_get_profiler_filename).

https://psalm.dev/r/5ef2b9cf17

Many repositories need to fix, so please help if you like.

If you could help, it would be helpful if you could comment before starting the work not to overlapping.

Fix example

Run exit command after lint.

echo '::group:: Running golangci-lint with reviewdog 🐶 ...'
go