All drills

code/rules-clean

The team's own Semgrep rules report no error-level findings.

highofficial

Install

firedrill hub add code/rules-clean

Reads

semgrep.results

Fix when it fails

Fix or suppress each finding in the code.

Test cases

CaseExpected
cleanPASS
errorFAIL
not readN/A

Drill file

firedrill: v0
id: code/rules-clean
safeguard: "The team's own Semgrep rules report no error-level findings."
severity: high
fetch:
  semgrep: { fact: semgrep.results }
pass_when:
  - semgrep.found.filter(f, f.severity == "ERROR").size() == 0
fix: "Fix or suppress each finding in the code."