static-analysis

Describe the bug
Update on Homebrew-core job is failing during release https://github.com/returntocorp/semgrep/runs/4889454978?check_suite_focus=true

This is because https://github.com/returntocorp/semgrep/blob/develop/.github/workflows/release.yml#L320 has hardcoded the version of python that is running and github action is no longer running 3.9.9 but is running 3.9.10

We should dynami

Many repositories need to fix, so please help if you like.

If you could help, it would be helpful if you could comment before starting the work not to overlapping.

Fix example

Run exit command after lint.

echo '::group:: Running golangci-lint with reviewdog 🐶 ...'
go

The return type of str_replace is deduced to be string when I pass it a $subject (the third parameter) of type string | array<string>. A $subject of type string leads to the string return type, while array<float | int | string> leads to array<string>, which is correct. It only incorrectly assumes string when the $subject is of a union type.

https://psalm.dev/r/48f8c3f020

Expected Behavior

assignedExpression violates CanBeNonNullable.

private fun visitAssignment(assignedExpression: KtExpression?) {
    if (assignedExpression == null) return
    val name = if (assignedExpression is KtQualifiedExpression) {
        assignedExpression.selectorExpression
    } else {
        assignedExpression
    }?.text ?: return
    assignments.getOrPu