static-analysis

App Attest allows your app to attach a hardware-backed assertion as a part of the request. Your server can use assertion to verify the request came from your genuine app, on a genuine Apple device.

https://developer.apple.com/videos/play/wwdc2021/10244/

https://developer.apple.com/documentation/devicecheck/assessing_fraud_risk

https://developer.apple.com/documentation/bundleresources/entit

Describe the bug

I expect metavariables between backticks to work in JavaScript:

$ semgrep --lang js -e '`$A`'
ran 1 rules on 1 files: 0 findings

I expect this to match the following:

`test`;

Priority
How important is this to you?

• P2: annoying but not blocking me

A WeakReference does mutate in unpredictable ways. Flagging it as immutable allows us to assume a previous WeakReference::get() ensured the reference was still alive. This assumption is wrong.
https://psalm.dev/r/6839ad5622

Many repositories need to fix, so please help if you like.

If you could help, it would be helpful if you could comment before starting the work not to overlapping.

Fix example

Run exit command after lint.

echo '::group:: Running golangci-lint with reviewdog 🐶 ...'
go