docs(ubs): add --only flag guidance to prevent cross-language false positives #504
+45
−147
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
added 2 commits
January 30, 2026 17:16
- terraphim_automata: add #[allow(dead_code)] for read_url (Quick Rust Validation) - deploy-docs.yml: pre-checkout cleanup of target/ on self-hosted (Build Documentation) - python-bindings.yml: pre-checkout cleanup of target/ on self-hosted (Lint Python Code) - deploy-website.yml: skip deploy job on pull_request (1password/setup not found on PRs)
…ositives - Update Golden Rule to emphasize --only=<lang> flag usage - Add 'Why --only is Critical' section explaining false positive issues - Add language-specific command examples (rust, python, js) - Add Language Flags Quick Reference table for all 8 languages - Add anti-pattern: scanning without --only flag This prevents Python/JavaScript scanners from producing false positives when scanning Rust files (e.g., 'invalid-syntax' errors, 'loose equality' warnings on OsString comparisons).
Contributor
Author
|
Merged documentation updates for UBS --only flag |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Summary
Updates the UBS (Ultimate Bug Scanner) documentation to emphasize the importance of using the
--onlyflag when scanning files.Problem
UBS auto-detects all 8 languages (js, python, cpp, rust, golang, java, ruby, swift) and scans every file with every scanner. This causes false positives:
Solution
Updated
.cursor/rules/ubs.mdwith:Changes
--only=<lang>flag usage--only" anti-patternImpact
Prevents Python/JavaScript scanners from producing false positives when scanning Rust files (e.g., 'invalid-syntax' errors, 'loose equality' warnings on OsString comparisons).
Testing
--only=rustflag works as expected on Rust filesChecklist