nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Tool to scan .jsl scripts for vulnerabilities

martindemel

Hi, I got this question from a customer and wonder if the Assistant or other tool could be used:

“We are curious to know if SAS JMP have developed any tools that is able to scan .jsl scripts in a git-backed repository vulnerabilities, similarly to what GitHub's CodeQL is able to perform. The reason we ask this is because the CodeQL from GitHub doesn't support .jsl and therefore cannot be scanned for vulnerabilities. We also don't want to review all of our .jsl scripts ourselves if such a tool exist, developed either by SAS JMP or any JMP affiliates

Code scanning with CodeQL - GitHub Docs

@russ_wolfinger, @scott_allen

Accepted answers

scott_allen

@martindemel

We currently run an in-house tool for scanning JSL before extensions are published in the Marketplace. I can check with the team to see if it is something we could consider providing externally.

All comments

scott_allen

@martindemel

We currently run an in-house tool for scanning JSL before extensions are published in the Marketplace. I can check with the team to see if it is something we could consider providing externally.

martindemel

That would be awesome!

martindemel

Hi @scott_allen, any news on this?