nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

954066_en-US

liliconcom

Tool to scan .jsl scripts for vulnerabilities

Hi, I got this question from a customer and wonder if the Assistant or other tool could be used:

“We are curious to know if SAS JMP have developed any tools that is able to scan .jsl scripts in a git-backed repository vulnerabilities, similarly to what GitHub's CodeQL is able to perform. The reason we ask this is because the CodeQL from GitHub doesn't support .jsl and therefore cannot be scanned for vulnerabilities. We also don't want to review all of our .jsl scripts ourselves if such a tool exist, developed either by SAS JMP or any JMP affiliates

Code scanning with CodeQL - GitHub Docs

@russ_wolfinger, @scott_allen

Re: Tool to scan .jsl scripts for vulnerabilities

@martindemel

We currently run an in-house tool for scanning JSL before extensions are published in the Marketplace. I can check with the team to see if it is something we could consider providing externally.

Re: Tool to scan .jsl scripts for vulnerabilities

That would be awesome!

Re: Tool to scan .jsl scripts for vulnerabilities

Hi @scott_allen, any news on this?

Comments

There are no comments yet