@boyingliu01/xp-gate 0.8.1 → 0.8.2

package/adapters/plugins/whalecloud-java/rules/exception/wc-except-003.yml

@@ -0,0 +1,17 @@
+---
+id: WC-EXCEPT-003
+name: catch时分清稳定和非稳定代码
+severity: error  # error=阻断, warning=警告
+source: J000041
+tool: auto  # auto-manual-auto: detected by tool / manual check / AST-grep
+category: wc-exception
+description: |
+  catch时分清稳定和非稳定代码
+
+  对应浩鲸规范 J000041。
+
+check:
+  type: ast-grep  # ast-grep / pmd-custom / spotbugs / checkstyle / manual
+  pattern: TODO
+
+notes: "Stable vs unstable code separation"

package/adapters/plugins/whalecloud-java/rules/exception/wc-except-004.yml

@@ -0,0 +1,17 @@
+---
+id: WC-EXCEPT-004
+name: 捕获异常需处理不可抛弃
+severity: error  # error=阻断, warning=警告
+source: J000042
+tool: auto  # auto-manual-auto: detected by tool / manual check / AST-grep
+category: wc-exception
+description: |
+  捕获异常需处理不可抛弃
+
+  对应浩鲸规范 J000042。
+
+check:
+  type: ast-grep  # ast-grep / pmd-custom / spotbugs / checkstyle / manual
+  pattern: TODO
+
+notes: "Empty catch block prohibition"

package/adapters/plugins/whalecloud-java/rules/exception/wc-except-005.yml

@@ -0,0 +1,17 @@
+---
+id: WC-EXCEPT-005
+name: finally块必须关闭资源
+severity: error  # error=阻断, warning=警告
+source: J000043
+tool: auto  # auto-manual-auto: detected by tool / manual check / AST-grep
+category: wc-exception
+description: |
+  finally块必须关闭资源
+
+  对应浩鲸规范 J000043。
+
+check:
+  type: ast-grep  # ast-grep / pmd-custom / spotbugs / checkstyle / manual
+  pattern: TODO
+
+notes: "Resource cleanup in finally"

package/adapters/plugins/whalecloud-java/rules/exception/wc-except-006.yml

@@ -0,0 +1,17 @@
+---
+id: WC-EXCEPT-006
+name: 不在finally块中使用return
+severity: error  # error=阻断, warning=警告
+source: J000044
+tool: auto  # auto-manual-auto: detected by tool / manual check / AST-grep
+category: wc-exception
+description: |
+  不在finally块中使用return
+
+  对应浩鲸规范 J000044。
+
+check:
+  type: ast-grep  # ast-grep / pmd-custom / spotbugs / checkstyle / manual
+  pattern: TODO
+
+notes: "PMD:ReturnFromFinallyBlock"

package/adapters/plugins/whalecloud-java/rules/exception/wc-except-007.yml

@@ -0,0 +1,17 @@
+---
+id: WC-EXCEPT-007
+name: 抛异常与捕获异常必须完全匹配
+severity: error  # error=阻断, warning=警告
+source: J000046
+tool: auto  # auto-manual-auto: detected by tool / manual check / AST-grep
+category: wc-exception
+description: |
+  抛异常与捕获异常必须完全匹配
+
+  对应浩鲸规范 J000046。
+
+check:
+  type: ast-grep  # ast-grep / pmd-custom / spotbugs / checkstyle / manual
+  pattern: TODO
+
+notes: "Exception type matching"

package/adapters/plugins/whalecloud-java/rules/exception/wc-except-008.yml

@@ -0,0 +1,17 @@
+---
+id: WC-EXCEPT-008
+name: 避免空的try/catch/finally语句块
+severity: error  # error=阻断, warning=警告
+source: J000096
+tool: auto  # auto-manual-auto: detected by tool / manual check / AST-grep
+category: wc-exception
+description: |
+  避免空的try/catch/finally语句块
+
+  对应浩鲸规范 J000096。
+
+check:
+  type: ast-grep  # ast-grep / pmd-custom / spotbugs / checkstyle / manual
+  pattern: TODO
+
+notes: "PMD:EmptyCatchBlock/EmptyFinallyBlock"

package/adapters/plugins/whalecloud-java/rules/exception/wc-except-009.yml

@@ -0,0 +1,17 @@
+---
+id: WC-EXCEPT-009
+name: 区分unchecked/checked异常
+severity: warning  # error=阻断, warning=警告
+source: J000048
+tool: auto  # auto-manual-auto: detected by tool / manual check / AST-grep
+category: wc-exception
+description: |
+  区分unchecked/checked异常
+
+  对应浩鲸规范 J000048。
+
+check:
+  type: ast-grep  # ast-grep / pmd-custom / spotbugs / checkstyle / manual
+  pattern: TODO
+
+notes: "Exception classification"

package/adapters/plugins/whalecloud-java/rules/exception/wc-except-010.yml

@@ -0,0 +1,17 @@
+---
+id: WC-EXCEPT-010
+name: 对外API必须使用错误码
+severity: warning  # error=阻断, warning=警告
+source: J000049
+tool: auto  # auto-manual-auto: detected by tool / manual check / AST-grep
+category: wc-exception
+description: |
+  对外API必须使用错误码
+
+  对应浩鲸规范 J000049。
+
+check:
+  type: ast-grep  # ast-grep / pmd-custom / spotbugs / checkstyle / manual
+  pattern: TODO
+
+notes: "Error code standardization"

package/adapters/plugins/whalecloud-java/rules/exception/wc-except-011.yml

@@ -0,0 +1,17 @@
+---
+id: WC-EXCEPT-011
+name: JDK9+ try-with-resources优化
+severity: warning  # error=阻断, warning=警告
+source: J000045
+tool: auto  # auto-manual-auto: detected by tool / manual check / AST-grep
+category: wc-exception
+description: |
+  JDK9+ try-with-resources优化
+
+  对应浩鲸规范 J000045。
+
+check:
+  type: ast-grep  # ast-grep / pmd-custom / spotbugs / checkstyle / manual
+  pattern: TODO
+
+notes: "Resource management improvement"

package/adapters/plugins/whalecloud-java/rules/logging/wc-log-001.yml

@@ -0,0 +1,17 @@
+---
+id: WC-LOG-001
+name: 日志输出字符串拼接使用占位符
+severity: error  # error=阻断, warning=警告
+source: J000053
+tool: auto  # auto-manual-auto: detected by tool / manual check / AST-grep
+category: wc-logging
+description: |
+  日志输出字符串拼接使用占位符
+
+  对应浩鲸规范 J000053。
+
+check:
+  type: ast-grep  # ast-grep / pmd-custom / spotbugs / checkstyle / manual
+  pattern: TODO
+
+notes: "PMD:LoggerFormat already covers"

package/adapters/plugins/whalecloud-java/rules/logging/wc-log-002.yml

@@ -0,0 +1,17 @@
+---
+id: WC-LOG-002
+name: trace/debug/info日志输出前需判断级别
+severity: error  # error=阻断, warning=警告
+source: J000054
+tool: auto  # auto-manual-auto: detected by tool / manual check / AST-grep
+category: wc-logging
+description: |
+  trace/debug/info日志输出前需判断级别
+
+  对应浩鲸规范 J000054。
+
+check:
+  type: ast-grep  # ast-grep / pmd-custom / spotbugs / checkstyle / manual
+  pattern: TODO
+
+notes: "isDebugEnabled() guard"

package/adapters/plugins/whalecloud-java/rules/logging/wc-log-003.yml

@@ -0,0 +1,17 @@
+---
+id: WC-LOG-003
+name: 避免重复打印日志
+severity: error  # error=阻断, warning=警告
+source: J000055
+tool: auto  # auto-manual-auto: detected by tool / manual check / AST-grep
+category: wc-logging
+description: |
+  避免重复打印日志
+
+  对应浩鲸规范 J000055。
+
+check:
+  type: ast-grep  # ast-grep / pmd-custom / spotbugs / checkstyle / manual
+  pattern: TODO
+
+notes: "Log duplication prevention"

package/adapters/plugins/whalecloud-java/rules/logging/wc-log-004.yml

@@ -0,0 +1,17 @@
+---
+id: WC-LOG-004
+name: 异常信息包括案发现场和堆栈信息
+severity: error  # error=阻断, warning=警告
+source: J000056
+tool: auto  # auto-manual-auto: detected by tool / manual check / AST-grep
+category: wc-logging
+description: |
+  异常信息包括案发现场和堆栈信息
+
+  对应浩鲸规范 J000056。
+
+check:
+  type: ast-grep  # ast-grep / pmd-custom / spotbugs / checkstyle / manual
+  pattern: TODO
+
+notes: "Context + stacktrace"

package/adapters/plugins/whalecloud-java/rules/logging/wc-log-005.yml

@@ -0,0 +1,17 @@
+---
+id: WC-LOG-005
+name: 生产环境禁止输出debug日志
+severity: error  # error=阻断, warning=警告
+source: J000058
+tool: auto  # auto-manual-auto: detected by tool / manual check / AST-grep
+category: wc-logging
+description: |
+  生产环境禁止输出debug日志
+
+  对应浩鲸规范 J000058。
+
+check:
+  type: ast-grep  # ast-grep / pmd-custom / spotbugs / checkstyle / manual
+  pattern: TODO
+
+notes: "Production log level"

package/adapters/plugins/whalecloud-java/rules/logging/wc-log-006.yml

@@ -0,0 +1,17 @@
+---
+id: WC-LOG-006
+name: 国际化团队使用全英文日志
+severity: error  # error=阻断, warning=警告
+source: J000057
+tool: auto  # auto-manual-auto: detected by tool / manual check / AST-grep
+category: wc-logging
+description: |
+  国际化团队使用全英文日志
+
+  对应浩鲸规范 J000057。
+
+check:
+  type: ast-grep  # ast-grep / pmd-custom / spotbugs / checkstyle / manual
+  pattern: TODO
+
+notes: "English-only logs"

package/adapters/plugins/whalecloud-java/rules/logging/wc-log-007.yml

@@ -0,0 +1,17 @@
+---
+id: WC-LOG-007
+name: 使用warn记录用户输入参数错误
+severity: warning  # error=阻断, warning=警告
+source: J000059
+tool: auto  # auto-manual-auto: detected by tool / manual check / AST-grep
+category: wc-logging
+description: |
+  使用warn记录用户输入参数错误
+
+  对应浩鲸规范 J000059。
+
+check:
+  type: ast-grep  # ast-grep / pmd-custom / spotbugs / checkstyle / manual
+  pattern: TODO
+
+notes: "Warning level for input errors"

package/adapters/plugins/whalecloud-java/rules/performance/wc-perf-001.yml

@@ -0,0 +1,17 @@
+---
+id: WC-PERF-001
+name: 使用正则表达式利用预编译功能
+severity: error  # error=阻断, warning=警告
+source: J000124
+tool: auto  # auto-manual-auto: detected by tool / manual check / AST-grep
+category: wc-performance
+description: |
+  使用正则表达式利用预编译功能
+
+  对应浩鲸规范 J000124。
+
+check:
+  type: ast-grep  # ast-grep / pmd-custom / spotbugs / checkstyle / manual
+  pattern: TODO
+
+notes: "Pattern.compile cache"

package/adapters/plugins/whalecloud-java/rules/performance/wc-perf-002.yml

@@ -0,0 +1,17 @@
+---
+id: WC-PERF-002
+name: 利用缓冲流类提高I/O操作效率
+severity: error  # error=阻断, warning=警告
+source: J000127
+tool: auto  # auto-manual-auto: detected by tool / manual check / AST-grep
+category: wc-performance
+description: |
+  利用缓冲流类提高I/O操作效率
+
+  对应浩鲸规范 J000127。
+
+check:
+  type: ast-grep  # ast-grep / pmd-custom / spotbugs / checkstyle / manual
+  pattern: TODO
+
+notes: "BufferedInputStream/Reader"

package/adapters/plugins/whalecloud-java/rules/performance/wc-perf-003.yml

@@ -0,0 +1,17 @@
+---
+id: WC-PERF-003
+name: 合理使用字符串连接方式
+severity: error  # error=阻断, warning=警告
+source: J000120
+tool: auto  # auto-manual-auto: detected by tool / manual check / AST-grep
+category: wc-performance
+description: |
+  合理使用字符串连接方式
+
+  对应浩鲸规范 J000120。
+
+check:
+  type: ast-grep  # ast-grep / pmd-custom / spotbugs / checkstyle / manual
+  pattern: TODO
+
+notes: "StringBuilder vs concatenation"

package/adapters/plugins/whalecloud-java/rules/performance/wc-perf-004.yml

@@ -0,0 +1,17 @@
+---
+id: WC-PERF-004
+name: 优先使用toCharArray遍历字符
+severity: error  # error=阻断, warning=警告
+source: J000122
+tool: auto  # auto-manual-auto: detected by tool / manual check / AST-grep
+category: wc-performance
+description: |
+  优先使用toCharArray遍历字符
+
+  对应浩鲸规范 J000122。
+
+check:
+  type: ast-grep  # ast-grep / pmd-custom / spotbugs / checkstyle / manual
+  pattern: TODO
+
+notes: "String char iteration"

package/adapters/plugins/whalecloud-java/rules/performance/wc-perf-005.yml

@@ -0,0 +1,17 @@
+---
+id: WC-PERF-005
+name: 避免使用已过时的技术或组件
+severity: warning  # error=阻断, warning=警告
+source: J001061
+tool: auto  # auto-manual-auto: detected by tool / manual check / AST-grep
+category: wc-performance
+description: |
+  避免使用已过时的技术或组件
+
+  对应浩鲸规范 J001061。
+
+check:
+  type: ast-grep  # ast-grep / pmd-custom / spotbugs / checkstyle / manual
+  pattern: TODO
+
+notes: "Deprecated technology usage"

package/adapters/plugins/whalecloud-java/rules/performance/wc-perf-006.yml

@@ -0,0 +1,17 @@
+---
+id: WC-PERF-006
+name: 尽早释放无用对象引用
+severity: warning  # error=阻断, warning=警告
+source: J000107
+tool: auto  # auto-manual-auto: detected by tool / manual check / AST-grep
+category: wc-performance
+description: |
+  尽早释放无用对象引用
+
+  对应浩鲸规范 J000107。
+
+check:
+  type: ast-grep  # ast-grep / pmd-custom / spotbugs / checkstyle / manual
+  pattern: TODO
+
+notes: "Reference clearing"

package/adapters/plugins/whalecloud-java/rules/performance/wc-perf-007.yml

@@ -0,0 +1,17 @@
+---
+id: WC-PERF-007
+name: 高并发/循环中避免直接调用System.getProperty
+severity: warning  # error=阻断, warning=警告
+source: J001127
+tool: auto  # auto-manual-auto: detected by tool / manual check / AST-grep
+category: wc-performance
+description: |
+  高并发/循环中避免直接调用System.getProperty
+
+  对应浩鲸规范 J001127。
+
+check:
+  type: ast-grep  # ast-grep / pmd-custom / spotbugs / checkstyle / manual
+  pattern: TODO
+
+notes: "System.getProperty caching"

package/adapters/plugins/whalecloud-java/rules/performance/wc-perf-008.yml

@@ -0,0 +1,17 @@
+---
+id: WC-PERF-008
+name: 数据结构初始化指定大小
+severity: warning  # error=阻断, warning=警告
+source: J000113
+tool: auto  # auto-manual-auto: detected by tool / manual check / AST-grep
+category: wc-performance
+description: |
+  数据结构初始化指定大小
+
+  对应浩鲸规范 J000113。
+
+check:
+  type: ast-grep  # ast-grep / pmd-custom / spotbugs / checkstyle / manual
+  pattern: TODO
+
+notes: "Collection capacity hints"

package/adapters/plugins/whalecloud-java/rules/resource/wc-reso-001.yml

@@ -0,0 +1,17 @@
+---
+id: WC-RESO-001
+name: 避免静态块中执行复杂逻辑
+severity: error  # error=阻断, warning=警告
+source: J000051
+tool: auto  # auto-manual-auto: detected by tool / manual check / AST-grep
+category: wc-resource
+description: |
+  避免静态块中执行复杂逻辑
+
+  对应浩鲸规范 J000051。
+
+check:
+  type: ast-grep  # ast-grep / pmd-custom / spotbugs / checkstyle / manual
+  pattern: TODO
+
+notes: "Static initializer complexity"

package/adapters/plugins/whalecloud-java/rules/resource/wc-reso-002.yml

@@ -0,0 +1,17 @@
+---
+id: WC-RESO-002
+name: 避免使用System.gc强制内存回收
+severity: error  # error=阻断, warning=警告
+source: J000108
+tool: auto  # auto-manual-auto: detected by tool / manual check / AST-grep
+category: wc-resource
+description: |
+  避免使用System.gc强制内存回收
+
+  对应浩鲸规范 J000108。
+
+check:
+  type: ast-grep  # ast-grep / pmd-custom / spotbugs / checkstyle / manual
+  pattern: TODO
+
+notes: "PMD:DoNotCallSystemExit"

package/adapters/plugins/whalecloud-java/rules/resource/wc-reso-003.yml

@@ -0,0 +1,17 @@
+---
+id: WC-RESO-003
+name: 避免在构造器中创建大量对象
+severity: error  # error=阻断, warning=警告
+source: J000109
+tool: auto  # auto-manual-auto: detected by tool / manual check / AST-grep
+category: wc-resource
+description: |
+  避免在构造器中创建大量对象
+
+  对应浩鲸规范 J000109。
+
+check:
+  type: ast-grep  # ast-grep / pmd-custom / spotbugs / checkstyle / manual
+  pattern: TODO
+
+notes: "Constructor complexity"

package/adapters/plugins/whalecloud-java/rules/resource/wc-reso-004.yml

@@ -0,0 +1,17 @@
+---
+id: WC-RESO-004
+name: 避免将过大文件一次性加载到内存
+severity: error  # error=阻断, warning=警告
+source: J000111
+tool: auto  # auto-manual-auto: detected by tool / manual check / AST-grep
+category: wc-resource
+description: |
+  避免将过大文件一次性加载到内存
+
+  对应浩鲸规范 J000111。
+
+check:
+  type: ast-grep  # ast-grep / pmd-custom / spotbugs / checkstyle / manual
+  pattern: TODO
+
+notes: "Memory management"

package/adapters/plugins/whalecloud-java/rules/resource/wc-reso-005.yml

@@ -0,0 +1,17 @@
+---
+id: WC-RESO-005
+name: JDBC结果集大小应当加以限制
+severity: error  # error=阻断, warning=警告
+source: J000110
+tool: auto  # auto-manual-auto: detected by tool / manual check / AST-grep
+category: wc-resource
+description: |
+  JDBC结果集大小应当加以限制
+
+  对应浩鲸规范 J000110。
+
+check:
+  type: ast-grep  # ast-grep / pmd-custom / spotbugs / checkstyle / manual
+  pattern: TODO
+
+notes: "ResultSet fetch size"

package/adapters/plugins/whalecloud-java/rules/resource/wc-reso-006.yml

@@ -0,0 +1,17 @@
+---
+id: WC-RESO-006
+name: 谨慎使用Object.clone进行对象拷贝
+severity: error  # error=阻断, warning=警告
+source: J000094
+tool: auto  # auto-manual-auto: detected by tool / manual check / AST-grep
+category: wc-resource
+description: |
+  谨慎使用Object.clone进行对象拷贝
+
+  对应浩鲸规范 J000094。
+
+check:
+  type: ast-grep  # ast-grep / pmd-custom / spotbugs / checkstyle / manual
+  pattern: TODO
+
+notes: "Clone vs copy constructor"

package/adapters/plugins/whalecloud-java/rules/security/wc-secu-001.yml

@@ -0,0 +1,17 @@
+---
+id: WC-SECU-001
+name: 禁止字符串拼接防范SQL注入
+severity: error  # error=阻断, warning=警告
+source: J000078
+tool: auto  # auto-manual-auto: detected by tool / manual check / AST-grep
+category: wc-security
+description: |
+  禁止字符串拼接防范SQL注入
+
+  对应浩鲸规范 J000078。
+
+check:
+  type: ast-grep  # ast-grep / pmd-custom / spotbugs / checkstyle / manual
+  pattern: TODO
+
+notes: "PreparedStatement usage — PMD:UsePreparedStatement"

package/adapters/plugins/whalecloud-java/rules/security/wc-secu-002.yml

@@ -0,0 +1,17 @@
+---
+id: WC-SECU-002
+name: 不使用MD2/MD4/MD5加密敏感数据
+severity: error  # error=阻断, warning=警告
+source: J000075
+tool: auto  # auto-manual-auto: detected by tool / manual check / AST-grep
+category: wc-security
+description: |
+  不使用MD2/MD4/MD5加密敏感数据
+
+  对应浩鲸规范 J000075。
+
+check:
+  type: ast-grep  # ast-grep / pmd-custom / spotbugs / checkstyle / manual
+  pattern: TODO
+
+notes: "SHA256 recommendation"

package/adapters/plugins/whalecloud-java/rules/security/wc-secu-003.yml

@@ -0,0 +1,17 @@
+---
+id: WC-SECU-003
+name: 优先使用Spring RestTemplate进行HTTP请求
+severity: error  # error=阻断, warning=警告
+source: J000076
+tool: auto  # auto-manual-auto: detected by tool / manual check / AST-grep
+category: wc-security
+description: |
+  优先使用Spring RestTemplate进行HTTP请求
+
+  对应浩鲸规范 J000076。
+
+check:
+  type: ast-grep  # ast-grep / pmd-custom / spotbugs / checkstyle / manual
+  pattern: TODO
+
+notes: "HTTP client abstraction"

package/adapters/plugins/whalecloud-java/rules/security/wc-secu-004.yml

@@ -0,0 +1,17 @@
+---
+id: WC-SECU-004
+name: 使用HttpClient必须显式关闭响应资源
+severity: error  # error=阻断, warning=警告
+source: J000052
+tool: auto  # auto-manual-auto: detected by tool / manual check / AST-grep
+category: wc-security
+description: |
+  使用HttpClient必须显式关闭响应资源
+
+  对应浩鲸规范 J000052。
+
+check:
+  type: ast-grep  # ast-grep / pmd-custom / spotbugs / checkstyle / manual
+  pattern: TODO
+
+notes: "Connection pool management"

package/adapters/plugins/whalecloud-java/rules/security/wc-secu-005.yml

@@ -0,0 +1,17 @@
+---
+id: WC-SECU-005
+name: 禁止内外层循环使用相同遍历变量
+severity: error  # error=阻断, warning=警告
+source: J000104
+tool: auto  # auto-manual-auto: detected by tool / manual check / AST-grep
+category: wc-security
+description: |
+  禁止内外层循环使用相同遍历变量
+
+  对应浩鲸规范 J000104。
+
+check:
+  type: ast-grep  # ast-grep / pmd-custom / spotbugs / checkstyle / manual
+  pattern: TODO
+
+notes: "Shadow variable risk"

package/adapters/plugins/whalecloud-java/rules/style/wc-style-001.yml

@@ -0,0 +1,17 @@
+---
+id: WC-STYLE-001
+name: 严格把控类成员变量和方法访问控制
+severity: error  # error=阻断, warning=警告
+source: J000064
+tool: auto  # auto-manual-auto: detected by tool / manual check / AST-grep
+category: wc-style
+description: |
+  严格把控类成员变量和方法访问控制
+
+  对应浩鲸规范 J000064。
+
+check:
+  type: ast-grep  # ast-grep / pmd-custom / spotbugs / checkstyle / manual
+  pattern: TODO
+
+notes: "Access modifier discipline"