diff --git a/ocaml/lang/security/hashtable-dos.yaml b/ocaml/lang/security/hashtable-dos.yaml index e29bc8b596..ce55b18054 100644 --- a/ocaml/lang/security/hashtable-dos.yaml +++ b/ocaml/lang/security/hashtable-dos.yaml @@ -13,7 +13,7 @@ rules: technology: - ocaml cwe: "CWE-399: Resource Management Errors (4.12)" - confidence: MEDIUM + confidence: LOW likelihood: LOW impact: LOW subcategory: diff --git a/yaml/semgrep/duplicate-pattern.test.yaml b/yaml/semgrep/duplicate-pattern.test.yaml index 19b0c0800a..2b71c75f1f 100644 --- a/yaml/semgrep/duplicate-pattern.test.yaml +++ b/yaml/semgrep/duplicate-pattern.test.yaml @@ -14,5 +14,6 @@ rules: subprocess.call(...) == $X message: >- This is not checking the return value of this subprocess call; if it fails no exception will be raised. Consider subprocess.check_call() instead + languages: [python] severity: WARNING fix: subprocess.check_call(...)