Typing it out by hand is still the best way to actually learn it though. Copy pasting from Stack Overflow means you never build the muscle memory for syntax or catch the little stuff like your curly quote problem. Yeah it saves time, but you skip the part where your brain actually holds onto anything.

Small correction, Semgrep won't skip test files automatically just because you want it to. There's no built in "ignore tests" switch. What you actually do is write a paths exclude block in your .semgrep.yml or pass - exclude on the command line. Something like exclude: - "/test/" or - "_test.go". That's the real fix, not a rule tuning thing. The rule itself has no idea what a test fixture is. It just pattern matches. So the 47 hits were working as designed, which is the annoying part. I'd set up the exclude paths first, then rerun and see what's actually left. Half the time the number drops to zero and the whole panic was for nothing.