Feature requests | Rule Packs about grepmarx HOT 2 CLOSED

Hi @gbiagomba ,

I'm not sure if a automatically selecting all rules applicable to the language when defining the rule pack's language is the best approach.

Let's suppose you want to create a rule pack to detect only injection vulnerabilities for Java:

• Case 1: You create the new rule pack, then select Java, all Java rules are ticked. You have to manually untick all rules not related to injection vulnerabilities.
• Case 2: You create the new rule pack, tick the rules you need. Then you select the language: all Java rules are now ticked, and you have to do all the selection again.

But there is definitely an improvement needed here. I was thinking about two possibilities, maybe both:

1. Have default / uneditable rule packs for each supported language, containing all rules for the corresponding language and that updates automatically when new rules are added.
2. Improve the table filtering to make language filtering more convenient. This is close to your second suggestion.

What do you think about it?

As a workaround, here is how you can (not so) easily create rule packs containing all rules for a specific language:

1. Create a new rule pack
2. Define the supported language
3. Filter the rule table to display only rules for the language. In the search box, enter:
   "java." for Java (notice the dot at the end)
   "javascript." for JavaScript
   ".c." for C
   ... so in fact you filter on the rule's category
4. Click on the "select all" button at the top left of the rule table
5. Click on the Save button to register the rule pack

I know it looks painful, but it usually takes me less than 5 minutes to do this for all languages.

from grepmarx.