Bump semgrep to 1.86.0 (#121)

* Bump semgrep to 1.86.0

* fix test

* update readme

* codeql version

Dockerfile

@@ -1,4 +1,4 @@
-FROM python:3.11.0-slim
+FROM python:3.12-slim
 
 RUN apt-get update \
 && apt-get install gcc -y \

README.md

@@ -185,7 +185,10 @@ jobs:
     name: njsscan check
     steps:
     - name: Checkout the code
-      uses: actions/checkout@v2
+      uses: actions/[email protected]
+    - uses: actions/[email protected]
+      with:
+        python-version: '3.12'
     - name: nodejsscan scan
       id: njsscan
       uses: ajinabraham/njsscan-action@master
@@ -211,14 +214,17 @@ jobs:
     name: njsscan code scanning
     steps:
     - name: Checkout the code
-      uses: actions/checkout@v2
+      uses: actions/[email protected]
+    - uses: actions/[email protected]
+      with:
+        python-version: '3.12'
     - name: nodejsscan scan
       id: njsscan
       uses: ajinabraham/njsscan-action@master
       with:
         args: '. --sarif --output results.sarif || true'
     - name: Upload njsscan report
-      uses: github/codeql-action/upload-sarif@v1
+      uses: github/codeql-action/upload-sarif@v2
       with:
         sarif_file: results.sarif
 ```

njsscan/__init__.py

@@ -6,7 +6,7 @@
 __title__ = 'njsscan'
 __authors__ = 'Ajin Abraham'
 __copyright__ = f'Copyright {datetime.now().year} Ajin Abraham, OpenSecurity'
-__version__ = '0.3.7'
+__version__ = '0.4.0'
 __version_info__ = tuple(int(i) for i in __version__.split('.'))
 __all__ = [
     '__title__',

setup.py

@@ -49,7 +49,7 @@ def get_version(rel_path):
     long_description_content_type='text/markdown',
     install_requires=[
         'colorama>=0.4.5',
-        'libsast>=2.0.0',
+        'libsast>=3.1.0',
         'sarif-om>=1.0.4',
         'jschema-to-python>=1.2.3',
         'tabulate>=0.8.10',

tests/unit/test_nodejs.py

@@ -47,7 +47,7 @@
     'node_deserialize': 1,
     'serializetojs_deserialize': 2,
     'yaml_deserialize': 3,
-    'hardcoded_jwt_secret': 8,
+    'hardcoded_jwt_secret': 19,
     'node_secret': 11,
     'node_password': 9,
     'node_username': 1,

tox.ini

@@ -1,5 +1,5 @@
 [tox]
-envlist = py37, py38
+envlist = py37, py38, py39
 skipsdist = True
 toxworkdir=.tox-semgrep