@critiq/rules 0.1.0 → 0.3.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (495) hide show
  1. package/README.md +3 -2
  2. package/catalog.yaml +1415 -0
  3. package/package.json +1 -1
  4. package/rules/cfn/cfn.correctness.attributedefinitions-keyschemas-mismatch.rule.yaml +49 -0
  5. package/rules/cfn/cfn.correctness.base64-validation-of-parameters.rule.yaml +49 -0
  6. package/rules/cfn/cfn.correctness.basic-cloudformation-resource-check.rule.yaml +49 -0
  7. package/rules/cfn/cfn.correctness.basic-cloudformation-template-configuration.rule.yaml +49 -0
  8. package/rules/cfn/cfn.correctness.cannot-reference-resources-in-the-conditions-block-of-the-template.rule.yaml +49 -0
  9. package/rules/cfn/cfn.correctness.check-at-least-one-essential-container-is-specified.rule.yaml +49 -0
  10. package/rules/cfn/cfn.correctness.check-deletionpolicy-values-for-resources.rule.yaml +49 -0
  11. package/rules/cfn/cfn.correctness.check-dependson-values-for-resources.rule.yaml +49 -0
  12. package/rules/cfn/cfn.correctness.check-ec2-ebs-properties.rule.yaml +49 -0
  13. package/rules/cfn/cfn.correctness.check-elastic-cache-redis-cluster-settings.rule.yaml +49 -0
  14. package/rules/cfn/cfn.correctness.check-events-rule-targets-are-less-than-or-equal-to-5.rule.yaml +49 -0
  15. package/rules/cfn/cfn.correctness.check-fargate-service-scheduling-strategy.rule.yaml +49 -0
  16. package/rules/cfn/cfn.correctness.check-fn-and-structure-for-validity.rule.yaml +49 -0
  17. package/rules/cfn/cfn.correctness.check-fn-equals-structure-for-validity.rule.yaml +49 -0
  18. package/rules/cfn/cfn.correctness.check-fn-if-structure-for-validity.rule.yaml +49 -0
  19. package/rules/cfn/cfn.correctness.check-fn-not-structure-for-validity.rule.yaml +49 -0
  20. package/rules/cfn/cfn.correctness.check-fn-or-structure-for-validity.rule.yaml +49 -0
  21. package/rules/cfn/cfn.correctness.check-for-subscriptionfilters-have-beyond-2-attachments-to-a-cloudwatch-log-group.rule.yaml +49 -0
  22. package/rules/cfn/cfn.correctness.check-if-a-json-object-is-within-size-limits.rule.yaml +49 -0
  23. package/rules/cfn/cfn.correctness.check-if-a-list-has-between-min-and-max-number-of-values-specified.rule.yaml +49 -0
  24. package/rules/cfn/cfn.correctness.check-if-a-list-has-duplicate-values.rule.yaml +49 -0
  25. package/rules/cfn/cfn.correctness.check-if-a-number-is-between-min-and-max.rule.yaml +49 -0
  26. package/rules/cfn/cfn.correctness.check-if-a-string-has-between-min-and-max-number-of-values-specified.rule.yaml +49 -0
  27. package/rules/cfn/cfn.correctness.check-if-eol-lambda-function-runtimes-are-used.rule.yaml +49 -0
  28. package/rules/cfn/cfn.correctness.check-if-properties-have-a-valid-value.rule.yaml +49 -0
  29. package/rules/cfn/cfn.correctness.check-if-property-values-adhere-to-a-specific-pattern.rule.yaml +49 -0
  30. package/rules/cfn/cfn.correctness.check-if-refing-to-a-iam-resource-with-path-set.rule.yaml +49 -0
  31. package/rules/cfn/cfn.correctness.check-if-refs-exist.rule.yaml +49 -0
  32. package/rules/cfn/cfn.correctness.check-if-serverless-resources-have-serverless-transform.rule.yaml +49 -0
  33. package/rules/cfn/cfn.correctness.check-if-the-referenced-conditions-are-defined.rule.yaml +49 -0
  34. package/rules/cfn/cfn.correctness.check-minimum-90-period-is-met-between-backupplan-cold-and-delete.rule.yaml +49 -0
  35. package/rules/cfn/cfn.correctness.check-properties-that-are-mutually-exclusive.rule.yaml +49 -0
  36. package/rules/cfn/cfn.correctness.check-properties-that-are-required-together.rule.yaml +49 -0
  37. package/rules/cfn/cfn.correctness.check-properties-that-need-at-least-one-of-a-list-of-properties.rule.yaml +49 -0
  38. package/rules/cfn/cfn.correctness.check-properties-that-need-only-one-of-a-list-of-properties.rule.yaml +49 -0
  39. package/rules/cfn/cfn.correctness.check-resource-properties-values.rule.yaml +49 -0
  40. package/rules/cfn/cfn.correctness.check-state-machine-definition-for-proper-syntax.rule.yaml +49 -0
  41. package/rules/cfn/cfn.correctness.check-that-modules-resources-are-valid.rule.yaml +49 -0
  42. package/rules/cfn/cfn.correctness.check-the-configuration-of-a-resources-updatepolicy.rule.yaml +49 -0
  43. package/rules/cfn/cfn.correctness.check-updatereplacepolicy-values-for-resources.rule.yaml +49 -0
  44. package/rules/cfn/cfn.correctness.check-values-of-properties-for-valid-refs-and-getatts.rule.yaml +49 -0
  45. package/rules/cfn/cfn.correctness.cidr-validation-of-parameters.rule.yaml +49 -0
  46. package/rules/cfn/cfn.correctness.cloudfront-aliases.rule.yaml +49 -0
  47. package/rules/cfn/cfn.correctness.codepipeline-stage-actions.rule.yaml +49 -0
  48. package/rules/cfn/cfn.correctness.codepipeline-stages.rule.yaml +49 -0
  49. package/rules/cfn/cfn.correctness.conditions-have-appropriate-properties.rule.yaml +49 -0
  50. package/rules/cfn/cfn.correctness.default-value-cannot-use-refs.rule.yaml +49 -0
  51. package/rules/cfn/cfn.correctness.default-value-is-within-parameter-constraints.rule.yaml +49 -0
  52. package/rules/cfn/cfn.correctness.error-processing-rule-on-the-template.rule.yaml +49 -0
  53. package/rules/cfn/cfn.correctness.findinmap-validation-of-configuration.rule.yaml +49 -0
  54. package/rules/cfn/cfn.correctness.getatt-validation-of-parameters.rule.yaml +49 -0
  55. package/rules/cfn/cfn.correctness.getaz-validation-of-parameters.rule.yaml +49 -0
  56. package/rules/cfn/cfn.correctness.importvalue-validation-of-parameters.rule.yaml +49 -0
  57. package/rules/cfn/cfn.correctness.join-validation-of-parameters.rule.yaml +49 -0
  58. package/rules/cfn/cfn.correctness.length-validation-of-parameters.rule.yaml +49 -0
  59. package/rules/cfn/cfn.correctness.mapping-attribute-limit-not-exceeded.rule.yaml +49 -0
  60. package/rules/cfn/cfn.correctness.mapping-keys-are-strings-and-alphanumeric.rule.yaml +49 -0
  61. package/rules/cfn/cfn.correctness.mapping-limit-not-exceeded.rule.yaml +49 -0
  62. package/rules/cfn/cfn.correctness.mapping-name-limit-not-exceeded.rule.yaml +49 -0
  63. package/rules/cfn/cfn.correctness.mappings-are-appropriately-configured.rule.yaml +49 -0
  64. package/rules/cfn/cfn.correctness.mappings-have-appropriate-names.rule.yaml +49 -0
  65. package/rules/cfn/cfn.correctness.metadata-interface-have-appropriate-properties.rule.yaml +49 -0
  66. package/rules/cfn/cfn.correctness.output-description-limit-not-exceeded.rule.yaml +49 -0
  67. package/rules/cfn/cfn.correctness.output-limit-not-exceeded.rule.yaml +49 -0
  68. package/rules/cfn/cfn.correctness.output-name-limit-not-exceeded.rule.yaml +49 -0
  69. package/rules/cfn/cfn.correctness.outputs-descriptions-can-only-be-strings.rule.yaml +49 -0
  70. package/rules/cfn/cfn.correctness.outputs-have-appropriate-names.rule.yaml +49 -0
  71. package/rules/cfn/cfn.correctness.outputs-have-appropriate-properties.rule.yaml +49 -0
  72. package/rules/cfn/cfn.correctness.outputs-have-required-properties.rule.yaml +49 -0
  73. package/rules/cfn/cfn.correctness.outputs-have-values-of-strings.rule.yaml +49 -0
  74. package/rules/cfn/cfn.correctness.parameter-limit-not-exceeded.rule.yaml +49 -0
  75. package/rules/cfn/cfn.correctness.parameter-name-limit-not-exceeded.rule.yaml +49 -0
  76. package/rules/cfn/cfn.correctness.parameter-value-limit-not-exceeded.rule.yaml +49 -0
  77. package/rules/cfn/cfn.correctness.parameters-have-appropriate-names.rule.yaml +49 -0
  78. package/rules/cfn/cfn.correctness.parameters-have-appropriate-properties.rule.yaml +49 -0
  79. package/rules/cfn/cfn.correctness.parameters-have-appropriate-type.rule.yaml +49 -0
  80. package/rules/cfn/cfn.correctness.property-is-required-based-on-another-properties-value.rule.yaml +49 -0
  81. package/rules/cfn/cfn.correctness.property-is-unwanted-based-on-another-properties-value.rule.yaml +49 -0
  82. package/rules/cfn/cfn.correctness.rds-instance-type-is-compatible-with-the-rds-type.rule.yaml +49 -0
  83. package/rules/cfn/cfn.correctness.recordset-hostedzonename-is-a-superdomain-of-name.rule.yaml +49 -0
  84. package/rules/cfn/cfn.correctness.ref-validation-of-value.rule.yaml +49 -0
  85. package/rules/cfn/cfn.correctness.required-resource-properties-are-missing.rule.yaml +49 -0
  86. package/rules/cfn/cfn.correctness.resource-dependencies-are-not-circular.rule.yaml +49 -0
  87. package/rules/cfn/cfn.correctness.resource-ec2-security-group-ingress-properties.rule.yaml +49 -0
  88. package/rules/cfn/cfn.correctness.resource-elb-properties.rule.yaml +49 -0
  89. package/rules/cfn/cfn.correctness.resource-limit-not-exceeded.rule.yaml +49 -0
  90. package/rules/cfn/cfn.correctness.resource-name-limit-not-exceeded.rule.yaml +49 -0
  91. package/rules/cfn/cfn.correctness.resource-properties-are-invalid.rule.yaml +49 -0
  92. package/rules/cfn/cfn.correctness.resource-schema.rule.yaml +49 -0
  93. package/rules/cfn/cfn.correctness.resource-subnetroutetableassociation-properties.rule.yaml +49 -0
  94. package/rules/cfn/cfn.correctness.resources-have-appropriate-names.rule.yaml +49 -0
  95. package/rules/cfn/cfn.correctness.select-validation-of-parameters.rule.yaml +49 -0
  96. package/rules/cfn/cfn.correctness.snapstart-supports-the-configured-runtime.rule.yaml +49 -0
  97. package/rules/cfn/cfn.correctness.split-validation-of-parameters.rule.yaml +49 -0
  98. package/rules/cfn/cfn.correctness.sub-is-required-if-a-variable-is-used-in-a-string.rule.yaml +49 -0
  99. package/rules/cfn/cfn.correctness.sub-validation-of-parameters.rule.yaml +49 -0
  100. package/rules/cfn/cfn.correctness.template-description-can-only-be-a-string.rule.yaml +49 -0
  101. package/rules/cfn/cfn.correctness.template-description-limit.rule.yaml +49 -0
  102. package/rules/cfn/cfn.correctness.template-size-limit.rule.yaml +49 -0
  103. package/rules/cfn/cfn.correctness.tojsonstring-validation-of-parameters.rule.yaml +49 -0
  104. package/rules/cfn/cfn.correctness.unique-resource-and-parameter-names.rule.yaml +49 -0
  105. package/rules/cfn/cfn.correctness.validate-accesscontrol-are-set-with-ownershipcontrols.rule.yaml +49 -0
  106. package/rules/cfn/cfn.correctness.validate-aws-event-scheduleexpression-format.rule.yaml +49 -0
  107. package/rules/cfn/cfn.correctness.validate-parameters-for-in-a-nested-stack.rule.yaml +49 -0
  108. package/rules/cfn/cfn.correctness.validate-route53-recordsets.rule.yaml +49 -0
  109. package/rules/cfn/cfn.correctness.validate-the-configuration-of-the-metadata-section.rule.yaml +49 -0
  110. package/rules/cfn/cfn.correctness.validates-foreach-functions.rule.yaml +49 -0
  111. package/rules/cfn/cfn.correctness.validation-not-function-configuration.rule.yaml +49 -0
  112. package/rules/cfn/cfn.correctness.validationdomain-is-superdomain-of-domainname.rule.yaml +49 -0
  113. package/rules/cfn/cfn.maintainability.arns-should-use-correctly-placed-pseudo-parameters.rule.yaml +49 -0
  114. package/rules/cfn/cfn.maintainability.availability-zone-parameters-should-not-be-hardcoded.rule.yaml +49 -0
  115. package/rules/cfn/cfn.maintainability.check-iam-resource-policies-syntax.rule.yaml +49 -0
  116. package/rules/cfn/cfn.maintainability.check-if-a-list-that-allows-duplicates-has-any-duplicates.rule.yaml +49 -0
  117. package/rules/cfn/cfn.maintainability.check-if-conditions-are-used.rule.yaml +49 -0
  118. package/rules/cfn/cfn.maintainability.check-if-eol-lambda-function-runtimes-are-used-w2531.rule.yaml +49 -0
  119. package/rules/cfn/cfn.maintainability.check-if-imageid-parameters-have-the-correct-type.rule.yaml +49 -0
  120. package/rules/cfn/cfn.maintainability.check-if-mappings-are-used.rule.yaml +49 -0
  121. package/rules/cfn/cfn.maintainability.check-if-parameters-are-used.rule.yaml +49 -0
  122. package/rules/cfn/cfn.maintainability.check-if-parameters-have-a-valid-value-based-on-an-allowed-pattern.rule.yaml +49 -0
  123. package/rules/cfn/cfn.maintainability.check-if-parameters-have-a-valid-value.rule.yaml +49 -0
  124. package/rules/cfn/cfn.maintainability.check-obsolete-dependson-configuration-for-resources.rule.yaml +49 -0
  125. package/rules/cfn/cfn.maintainability.check-outputs-using-importvalue.rule.yaml +49 -0
  126. package/rules/cfn/cfn.maintainability.check-required-properties-for-lambda-if-the-deployment-package-is-a-zip-file.rule.yaml +49 -0
  127. package/rules/cfn/cfn.maintainability.check-resources-with-auto-expiring-content-have-explicit-retention-period.rule.yaml +49 -0
  128. package/rules/cfn/cfn.maintainability.check-resources-with-updatereplacepolicy-deletionpolicy-have-both.rule.yaml +49 -0
  129. package/rules/cfn/cfn.maintainability.check-stateful-resources-have-a-set-updatereplacepolicy-deletionpolicy.rule.yaml +49 -0
  130. package/rules/cfn/cfn.maintainability.checks-for-legacy-instance-type-generations.rule.yaml +49 -0
  131. package/rules/cfn/cfn.maintainability.findinmap-keys-exist-in-the-map.rule.yaml +49 -0
  132. package/rules/cfn/cfn.maintainability.fn-equals-will-always-return-true-or-false.rule.yaml +49 -0
  133. package/rules/cfn/cfn.maintainability.mapping-attribute-limit.rule.yaml +49 -0
  134. package/rules/cfn/cfn.maintainability.mapping-limit.rule.yaml +49 -0
  135. package/rules/cfn/cfn.maintainability.mapping-name-limit.rule.yaml +49 -0
  136. package/rules/cfn/cfn.maintainability.metadata-interface-parameters-exist.rule.yaml +49 -0
  137. package/rules/cfn/cfn.maintainability.output-description-limit.rule.yaml +49 -0
  138. package/rules/cfn/cfn.maintainability.output-limit.rule.yaml +49 -0
  139. package/rules/cfn/cfn.maintainability.output-name-limit.rule.yaml +49 -0
  140. package/rules/cfn/cfn.maintainability.parameter-limit.rule.yaml +49 -0
  141. package/rules/cfn/cfn.maintainability.parameter-memory-size-attributes-should-have-max-and-min.rule.yaml +49 -0
  142. package/rules/cfn/cfn.maintainability.parameter-name-limit.rule.yaml +49 -0
  143. package/rules/cfn/cfn.maintainability.parameter-value-limit.rule.yaml +49 -0
  144. package/rules/cfn/cfn.maintainability.ref-getatt-to-resource-that-is-available-when-conditions-are-applied.rule.yaml +49 -0
  145. package/rules/cfn/cfn.maintainability.resource-limit.rule.yaml +49 -0
  146. package/rules/cfn/cfn.maintainability.resource-name-limit.rule.yaml +49 -0
  147. package/rules/cfn/cfn.maintainability.sub-isn-t-needed-if-it-doesn-t-have-a-variable-defined.rule.yaml +49 -0
  148. package/rules/cfn/cfn.maintainability.sub-validation-of-parameters-w1019.rule.yaml +49 -0
  149. package/rules/cfn/cfn.maintainability.template-description-limit-i1003.rule.yaml +49 -0
  150. package/rules/cfn/cfn.maintainability.template-size-limit-i1002.rule.yaml +49 -0
  151. package/rules/cfn/cfn.maintainability.use-sub-instead-of-join.rule.yaml +49 -0
  152. package/rules/cfn/cfn.maintainability.validate-that-snapstart-is-configured-for-java11-runtimes.rule.yaml +49 -0
  153. package/rules/cfn/cfn.maintainability.validate-that-snapstart-is-properly-configured.rule.yaml +49 -0
  154. package/rules/cfn/cfn.maintainability.warn-when-properties-are-configured-to-only-work-with-the-package-command.rule.yaml +49 -0
  155. package/rules/cfn/cfn.security.check-dynamic-references-secure-strings-are-in-supported-locations.rule.yaml +53 -0
  156. package/rules/cfn/cfn.security.check-for-noecho-references.rule.yaml +53 -0
  157. package/rules/cfn/cfn.security.check-iam-permission-configuration.rule.yaml +53 -0
  158. package/rules/cfn/cfn.security.check-if-iam-policies-are-properly-configured.rule.yaml +53 -0
  159. package/rules/cfn/cfn.security.check-if-password-properties-are-correctly-configured.rule.yaml +53 -0
  160. package/rules/cfn/cfn.security.controlling-access-to-an-s3-bucket-should-be-done-with-bucket-policies.rule.yaml +53 -0
  161. package/rules/go/go.correctness.defer-close-before-check.rule.yaml +44 -0
  162. package/rules/go/go.correctness.defer-in-loop.rule.yaml +47 -0
  163. package/rules/go/go.correctness.nil-context-passed.rule.yaml +43 -0
  164. package/rules/go/go.correctness.nil-map-assignment.rule.yaml +42 -0
  165. package/rules/go/go.correctness.time-tick-leak.rule.yaml +44 -0
  166. package/rules/go/go.correctness.unused-append-result.rule.yaml +43 -0
  167. package/rules/go/go.correctness.waitgroup-add-in-goroutine.rule.yaml +45 -0
  168. package/rules/go/go.security.bind-all-interfaces.rule.yaml +57 -0
  169. package/rules/go/go.security.echo-sensitive-binding-without-validation.rule.yaml +10 -0
  170. package/rules/go/go.security.echo-unsafe-multipart-upload.rule.yaml +10 -0
  171. package/rules/go/go.security.fiber-sensitive-binding-without-validation.rule.yaml +10 -0
  172. package/rules/go/go.security.fiber-unsafe-multipart-upload.rule.yaml +10 -0
  173. package/rules/go/go.security.gin-sensitive-binding-without-validation.rule.yaml +10 -0
  174. package/rules/go/go.security.gin-trust-all-proxies.rule.yaml +10 -0
  175. package/rules/go/go.security.gin-wildcard-cors-with-credentials.rule.yaml +10 -0
  176. package/rules/go/go.security.insecure-rand-seed.rule.yaml +55 -0
  177. package/rules/go/go.security.insecure-ssh-host-key.rule.yaml +57 -0
  178. package/rules/go/go.security.insecure-ssl-protocol.rule.yaml +56 -0
  179. package/rules/go/go.security.insecure-temp-file.rule.yaml +57 -0
  180. package/rules/go/go.security.jwt-without-verification.rule.yaml +56 -0
  181. package/rules/go/go.security.net-http-missing-timeouts.rule.yaml +10 -0
  182. package/rules/go/go.security.pprof-exposed.rule.yaml +56 -0
  183. package/rules/go/go.security.sensitive-data-egress.rule.yaml +10 -0
  184. package/rules/go/go.security.tar-path-traversal.rule.yaml +10 -0
  185. package/rules/go/go.security.template-unescaped-request-value.rule.yaml +10 -0
  186. package/rules/go/go.security.tls-missing-min-version.rule.yaml +55 -0
  187. package/rules/go/go.security.unsafe-package-import.rule.yaml +55 -0
  188. package/rules/go/go.security.weak-bcrypt-cost.rule.yaml +56 -0
  189. package/rules/go/go.security.weak-crypto-import.rule.yaml +57 -0
  190. package/rules/go/go.security.weak-rsa-key-size.rule.yaml +57 -0
  191. package/rules/go/go.security.weak-tls-cipher.rule.yaml +56 -0
  192. package/rules/java/java.correctness.catch-null-pointer.rule.yaml +40 -0
  193. package/rules/java/java.correctness.empty-catch.rule.yaml +40 -0
  194. package/rules/java/java.correctness.equals-on-array.rule.yaml +40 -0
  195. package/rules/java/java.correctness.return-in-finally.rule.yaml +40 -0
  196. package/rules/java/java.correctness.sync-on-string-literal.rule.yaml +40 -0
  197. package/rules/java/java.correctness.unsafe-optional-get.rule.yaml +40 -0
  198. package/rules/java/java.security.android-screenshot-exposure.rule.yaml +13 -0
  199. package/rules/java/java.security.android-world-readable-mode.rule.yaml +13 -0
  200. package/rules/java/java.security.hibernate-sql-concatenation.rule.yaml +62 -0
  201. package/rules/java/java.security.insecure-cipher-mode.rule.yaml +52 -0
  202. package/rules/java/java.security.insecure-network-protocol.rule.yaml +52 -0
  203. package/rules/java/java.security.insecure-ssl-context.rule.yaml +52 -0
  204. package/rules/java/java.security.jpa-concatenated-query.rule.yaml +13 -0
  205. package/rules/java/java.security.jwt-without-verification.rule.yaml +53 -0
  206. package/rules/java/java.security.null-cipher.rule.yaml +52 -0
  207. package/rules/java/java.security.permissive-cors.rule.yaml +53 -0
  208. package/rules/java/java.security.predictable-securerandom.rule.yaml +59 -0
  209. package/rules/java/java.security.reflected-output-from-request.rule.yaml +10 -0
  210. package/rules/java/java.security.servlet-insecure-cookie.rule.yaml +13 -0
  211. package/rules/java/java.security.shell-runtime-exec.rule.yaml +58 -0
  212. package/rules/java/java.security.spring-actuator-health-details-always.rule.yaml +13 -0
  213. package/rules/java/java.security.spring-actuator-sensitive-exposure.rule.yaml +13 -0
  214. package/rules/java/java.security.spring-csrf-globally-disabled.rule.yaml +13 -0
  215. package/rules/java/java.security.spring-debug-exposure.rule.yaml +13 -0
  216. package/rules/java/java.security.spring-permit-all-default.rule.yaml +13 -0
  217. package/rules/java/java.security.spring-webmvc-unrestricted-data-binding.rule.yaml +13 -0
  218. package/rules/java/java.security.template-unescaped-user-output.rule.yaml +10 -0
  219. package/rules/java/java.security.trust-all-certificates.rule.yaml +52 -0
  220. package/rules/java/java.security.unsafe-jackson-deserialization.rule.yaml +59 -0
  221. package/rules/java/java.security.weak-rsa-key-size.rule.yaml +54 -0
  222. package/rules/java/java.security.xxe-document-builder.rule.yaml +59 -0
  223. package/rules/java/java.security.xxe-xml-input-factory.rule.yaml +59 -0
  224. package/rules/php/php.correctness.abstract-method-outside-abstract-class.rule.yaml +36 -0
  225. package/rules/php/php.correctness.break-continue-outside-loop.rule.yaml +36 -0
  226. package/rules/php/php.correctness.case-insensitive-define.rule.yaml +36 -0
  227. package/rules/php/php.correctness.default-parameter-not-last.rule.yaml +36 -0
  228. package/rules/php/php.correctness.deprecated-filter-constant.rule.yaml +36 -0
  229. package/rules/php/php.correctness.deprecated-libxml-entity-loader.rule.yaml +36 -0
  230. package/rules/php/php.correctness.deprecated-unset-cast.rule.yaml +36 -0
  231. package/rules/php/php.correctness.duplicate-array-key.rule.yaml +36 -0
  232. package/rules/php/php.correctness.duplicate-declaration.rule.yaml +36 -0
  233. package/rules/php/php.correctness.empty-array-literal-slot.rule.yaml +36 -0
  234. package/rules/php/php.correctness.empty-bracket-array-access.rule.yaml +36 -0
  235. package/rules/php/php.correctness.empty-code-block.rule.yaml +36 -0
  236. package/rules/php/php.correctness.empty-function-body.rule.yaml +36 -0
  237. package/rules/php/php.correctness.error-suppression-operator.rule.yaml +36 -0
  238. package/rules/php/php.correctness.function-comparison.rule.yaml +36 -0
  239. package/rules/php/php.correctness.invalid-cookie-options.rule.yaml +36 -0
  240. package/rules/php/php.correctness.invalid-regex-literal.rule.yaml +36 -0
  241. package/rules/php/php.correctness.missing-member-visibility.rule.yaml +36 -0
  242. package/rules/php/php.correctness.nested-function-declaration.rule.yaml +36 -0
  243. package/rules/php/php.correctness.nested-switch.rule.yaml +36 -0
  244. package/rules/php/php.correctness.nullsafe-returned-by-reference.rule.yaml +36 -0
  245. package/rules/php/php.correctness.redundant-string-cast-concat.rule.yaml +36 -0
  246. package/rules/php/php.correctness.self-assignment.rule.yaml +36 -0
  247. package/rules/php/php.correctness.switch-multiple-default.rule.yaml +36 -0
  248. package/rules/php/php.correctness.todo-fixme-marker.rule.yaml +36 -0
  249. package/rules/php/php.correctness.unknown-magic-method.rule.yaml +36 -0
  250. package/rules/php/php.correctness.unreachable-after-return.rule.yaml +36 -0
  251. package/rules/php/php.correctness.useless-post-increment.rule.yaml +36 -0
  252. package/rules/php/php.correctness.useless-unset.rule.yaml +36 -0
  253. package/rules/php/php.performance.expensive-loop-condition.rule.yaml +36 -0
  254. package/rules/php/php.security.debug-function-exposure.rule.yaml +55 -0
  255. package/rules/php/php.security.insecure-cors-wildcard-with-credentials.rule.yaml +10 -0
  256. package/rules/php/php.security.insecure-mail-or-file-transport.rule.yaml +10 -0
  257. package/rules/php/php.security.insecure-session-id-generation.rule.yaml +51 -0
  258. package/rules/php/php.security.insecure-session-or-cookie-config.rule.yaml +10 -0
  259. package/rules/php/php.security.laravel-sensitive-csrf-exclusion.rule.yaml +13 -0
  260. package/rules/php/php.security.laravel-unsafe-blade-output.rule.yaml +13 -0
  261. package/rules/php/php.security.laravel-unsafe-mass-assignment.rule.yaml +13 -0
  262. package/rules/php/php.security.no-dynamic-eval.rule.yaml +52 -0
  263. package/rules/php/php.security.sensitive-data-egress.rule.yaml +10 -0
  264. package/rules/php/php.security.symfony-csrf-disabled.rule.yaml +13 -0
  265. package/rules/php/php.security.symfony-debug-exposure.rule.yaml +13 -0
  266. package/rules/php/php.security.unsafe-file-upload-handling.rule.yaml +10 -0
  267. package/rules/php/php.security.unsafe-include-with-user-input.rule.yaml +52 -0
  268. package/rules/php/php.security.unsafe-new-static.rule.yaml +42 -0
  269. package/rules/php/php.security.weak-cipher.rule.yaml +51 -0
  270. package/rules/php/php.security.wordpress-missing-nonce-or-capability.rule.yaml +13 -0
  271. package/rules/php/php.security.wordpress-unprepared-sql.rule.yaml +13 -0
  272. package/rules/php/php.security.xml-external-entity.rule.yaml +53 -0
  273. package/rules/python/py.correctness.assert-on-tuple.rule.yaml +33 -0
  274. package/rules/python/py.correctness.bare-except.rule.yaml +33 -0
  275. package/rules/python/py.correctness.broad-exception-handler.rule.yaml +33 -0
  276. package/rules/python/py.correctness.dangerous-mutable-default.rule.yaml +33 -0
  277. package/rules/python/py.correctness.duplicate-dict-key.rule.yaml +33 -0
  278. package/rules/python/py.security.bind-all-interfaces.rule.yaml +55 -0
  279. package/rules/python/py.security.debugger-import.rule.yaml +55 -0
  280. package/rules/python/py.security.django-csrf-exempt-state-changing.rule.yaml +13 -0
  281. package/rules/python/py.security.django-format-html-unsafe.rule.yaml +56 -0
  282. package/rules/python/py.security.django-mark-safe.rule.yaml +56 -0
  283. package/rules/python/py.security.django-missing-csrf-middleware.rule.yaml +13 -0
  284. package/rules/python/py.security.django-security-middleware-missing.rule.yaml +60 -0
  285. package/rules/python/py.security.django-unsafe-production-settings.rule.yaml +13 -0
  286. package/rules/python/py.security.drf-allow-any-default.rule.yaml +13 -0
  287. package/rules/python/py.security.drf-allow-any-unsafe-method.rule.yaml +13 -0
  288. package/rules/python/py.security.dynamic-code-execution.rule.yaml +55 -0
  289. package/rules/python/py.security.fastapi-insecure-cors.rule.yaml +13 -0
  290. package/rules/python/py.security.flask-debug-enabled.rule.yaml +56 -0
  291. package/rules/python/py.security.flask-missing-upload-body-limit.rule.yaml +13 -0
  292. package/rules/python/py.security.flask-unsafe-html-output.rule.yaml +13 -0
  293. package/rules/python/py.security.flask-unsafe-upload-filename.rule.yaml +13 -0
  294. package/rules/python/py.security.insecure-temp-file.rule.yaml +55 -0
  295. package/rules/python/py.security.insecure-yaml-load.rule.yaml +55 -0
  296. package/rules/python/py.security.jinja-autoescape-disabled.rule.yaml +58 -0
  297. package/rules/python/py.security.subprocess-shell-enabled.rule.yaml +55 -0
  298. package/rules/ruby/ruby.bug-risk.assignment-in-condition.rule.yaml +42 -0
  299. package/rules/ruby/ruby.bug-risk.deprecated-uri-escape.rule.yaml +42 -0
  300. package/rules/ruby/ruby.bug-risk.division-by-zero.rule.yaml +42 -0
  301. package/rules/ruby/ruby.bug-risk.duplicate-hash-keys.rule.yaml +42 -0
  302. package/rules/ruby/ruby.bug-risk.exception-class-overwritten.rule.yaml +42 -0
  303. package/rules/ruby/ruby.bug-risk.raw-sql-without-squish.rule.yaml +42 -0
  304. package/rules/ruby/ruby.security.debugger-call.rule.yaml +53 -0
  305. package/rules/ruby/ruby.security.dynamic-code-execution.rule.yaml +54 -0
  306. package/rules/ruby/ruby.security.insecure-json-load.rule.yaml +53 -0
  307. package/rules/ruby/ruby.security.kernel-open.rule.yaml +53 -0
  308. package/rules/ruby/ruby.security.plaintext-password-in-callback.rule.yaml +46 -0
  309. package/rules/ruby/ruby.security.rails-csrf-disabled.rule.yaml +13 -0
  310. package/rules/ruby/ruby.security.rails-detailed-exceptions-enabled.rule.yaml +13 -0
  311. package/rules/ruby/ruby.security.rails-link-to-blank-without-noopener.rule.yaml +48 -0
  312. package/rules/ruby/ruby.security.rails-open-redirect.rule.yaml +13 -0
  313. package/rules/ruby/ruby.security.rails-output-unsafe.rule.yaml +47 -0
  314. package/rules/ruby/ruby.security.rails-unsafe-html-output.rule.yaml +13 -0
  315. package/rules/ruby/ruby.security.rails-unsafe-render.rule.yaml +13 -0
  316. package/rules/ruby/ruby.security.rails-unsafe-session-or-cookie-store.rule.yaml +13 -0
  317. package/rules/ruby/ruby.security.rails-unsafe-strong-parameters.rule.yaml +13 -0
  318. package/rules/ruby/ruby.security.sensitive-data-egress.rule.yaml +10 -0
  319. package/rules/ruby/ruby.security.sidekiq-web-unauthenticated-mount.rule.yaml +10 -0
  320. package/rules/rust/rust.correctness.block-on-in-async.rule.yaml +48 -0
  321. package/rules/rust/rust.correctness.forget-join-handle.rule.yaml +48 -0
  322. package/rules/rust/rust.correctness.mutex-held-across-await.rule.yaml +48 -0
  323. package/rules/rust/rust.correctness.std-mutex-in-async-fn.rule.yaml +48 -0
  324. package/rules/rust/rust.correctness.thread-sleep-in-async.rule.yaml +48 -0
  325. package/rules/rust/rust.correctness.unbounded-channel.rule.yaml +49 -0
  326. package/rules/rust/rust.correctness.unchecked-index.rule.yaml +46 -0
  327. package/rules/rust/rust.security.actix-wildcard-cors-with-credentials.rule.yaml +13 -0
  328. package/rules/rust/rust.security.axum-body-limit-disabled.rule.yaml +13 -0
  329. package/rules/rust/rust.security.axum-insecure-cors-with-credentials.rule.yaml +13 -0
  330. package/rules/rust/rust.security.bind-all-interfaces.rule.yaml +57 -0
  331. package/rules/rust/rust.security.insecure-ssh-host-key.rule.yaml +57 -0
  332. package/rules/rust/rust.security.insecure-ssl-protocol.rule.yaml +57 -0
  333. package/rules/rust/rust.security.insecure-temp-file.rule.yaml +57 -0
  334. package/rules/rust/rust.security.insecure-yaml-load.rule.yaml +57 -0
  335. package/rules/rust/rust.security.jwt-without-verification.rule.yaml +57 -0
  336. package/rules/rust/rust.security.panic-in-async-handler.rule.yaml +57 -0
  337. package/rules/rust/rust.security.rocket-panic-prone-request-handler.rule.yaml +13 -0
  338. package/rules/rust/rust.security.rocket-unsafe-template-output.rule.yaml +13 -0
  339. package/rules/rust/rust.security.shell-command-spawn.rule.yaml +57 -0
  340. package/rules/rust/rust.security.sqlx-diesel-raw-interpolated-query.rule.yaml +13 -0
  341. package/rules/rust/rust.security.template-unescaped-request-value.rule.yaml +10 -0
  342. package/rules/rust/rust.security.tls-missing-min-version.rule.yaml +57 -0
  343. package/rules/rust/rust.security.warp-blocking-or-panic-in-async-handler.rule.yaml +13 -0
  344. package/rules/rust/rust.security.weak-crypto-import.rule.yaml +55 -0
  345. package/rules/rust/rust.security.weak-rsa-key-size.rule.yaml +57 -0
  346. package/rules/rust/rust.security.weak-tls-cipher.rule.yaml +57 -0
  347. package/rules/shared/security.archive-path-traversal.rule.yaml +10 -0
  348. package/rules/shared/security.external-file-upload.rule.yaml +10 -0
  349. package/rules/shared/security.insecure-http-transport.rule.yaml +10 -0
  350. package/rules/shared/security.no-command-execution-with-request-input.rule.yaml +10 -0
  351. package/rules/shared/security.no-hardcoded-credentials.rule.yaml +10 -0
  352. package/rules/shared/security.no-request-path-file-read.rule.yaml +10 -0
  353. package/rules/shared/security.no-sensitive-data-in-logs-and-telemetry.rule.yaml +10 -0
  354. package/rules/shared/security.no-sql-interpolation.rule.yaml +10 -0
  355. package/rules/shared/security.permissive-file-permissions.rule.yaml +10 -0
  356. package/rules/shared/security.sensitive-data-egress.rule.yaml +10 -0
  357. package/rules/shared/security.tls-verification-disabled.rule.yaml +10 -0
  358. package/rules/shared/security.unsafe-deserialization.rule.yaml +10 -0
  359. package/rules/shared/security.weak-hash-algorithm.rule.yaml +10 -0
  360. package/rules/typescript/ts.correctness.array-callback-missing-return.rule.yaml +35 -0
  361. package/rules/typescript/ts.correctness.array-sort-without-compare.rule.yaml +35 -0
  362. package/rules/typescript/ts.correctness.control-flow-in-finally.rule.yaml +35 -0
  363. package/rules/typescript/ts.correctness.duplicate-if-else-condition.rule.yaml +35 -0
  364. package/rules/typescript/ts.correctness.for-in-on-array.rule.yaml +35 -0
  365. package/rules/typescript/ts.correctness.infinite-loop.rule.yaml +32 -0
  366. package/rules/typescript/ts.correctness.invalid-await-expression.rule.yaml +32 -0
  367. package/rules/typescript/ts.correctness.invalid-typeof-comparison.rule.yaml +35 -0
  368. package/rules/typescript/ts.correctness.missing-async-on-promise-method.rule.yaml +32 -0
  369. package/rules/typescript/ts.correctness.missing-super-call.rule.yaml +35 -0
  370. package/rules/typescript/ts.correctness.no-floating-promise-in-function.rule.yaml +32 -0
  371. package/rules/typescript/ts.correctness.no-misused-promises.rule.yaml +32 -0
  372. package/rules/typescript/ts.correctness.promise-reject-non-error.rule.yaml +35 -0
  373. package/rules/typescript/ts.correctness.this-before-super.rule.yaml +35 -0
  374. package/rules/typescript/ts.correctness.unnecessary-return-await.rule.yaml +32 -0
  375. package/rules/typescript/ts.correctness.use-number-is-nan.rule.yaml +35 -0
  376. package/rules/typescript/ts.next.server-action-missing-local-auth.rule.yaml +13 -0
  377. package/rules/typescript/ts.performance.no-await-in-loop.rule.yaml +32 -0
  378. package/rules/typescript/ts.quality.no-empty-function.rule.yaml +32 -0
  379. package/rules/typescript/ts.react.no-bind-in-jsx-props.rule.yaml +36 -0
  380. package/rules/typescript/ts.react.no-children-prop.rule.yaml +34 -0
  381. package/rules/typescript/ts.react.no-direct-state-mutation.rule.yaml +34 -0
  382. package/rules/typescript/ts.react.no-duplicate-jsx-attributes.rule.yaml +34 -0
  383. package/rules/typescript/ts.react.no-jsx-props-spread.rule.yaml +35 -0
  384. package/rules/typescript/ts.react.no-set-state-in-component-did-mount.rule.yaml +34 -0
  385. package/rules/typescript/ts.react.no-set-state-in-component-did-update.rule.yaml +34 -0
  386. package/rules/typescript/ts.react.no-target-blank-without-rel.rule.yaml +46 -0
  387. package/rules/typescript/ts.react.no-this-in-function-component.rule.yaml +34 -0
  388. package/rules/typescript/ts.runtime.no-process-exit.rule.yaml +44 -0
  389. package/rules/typescript/ts.security.ajv-insecure-configuration.rule.yaml +10 -0
  390. package/rules/typescript/ts.security.angular-dom-sanitizer-bypass-untrusted-input.rule.yaml +13 -0
  391. package/rules/typescript/ts.security.apollo-server-csrf-disabled.rule.yaml +16 -0
  392. package/rules/typescript/ts.security.apollo-server-graphql-dev-tooling-exposure.rule.yaml +16 -0
  393. package/rules/typescript/ts.security.apollo-server-introspection-exposure.rule.yaml +16 -0
  394. package/rules/typescript/ts.security.apollo-server-missing-query-limits.rule.yaml +16 -0
  395. package/rules/typescript/ts.security.astro-vite-public-secret-define.rule.yaml +13 -0
  396. package/rules/typescript/ts.security.bind-to-all-interfaces.rule.yaml +10 -0
  397. package/rules/typescript/ts.security.browser-token-storage.rule.yaml +10 -0
  398. package/rules/typescript/ts.security.dangerous-insert-html.rule.yaml +10 -0
  399. package/rules/typescript/ts.security.dangerously-set-inner-html.rule.yaml +10 -0
  400. package/rules/typescript/ts.security.datadog-browser-track-user-interactions.rule.yaml +10 -0
  401. package/rules/typescript/ts.security.debug-mode-enabled.rule.yaml +10 -0
  402. package/rules/typescript/ts.security.debug-statement-in-source.rule.yaml +10 -0
  403. package/rules/typescript/ts.security.dynamodb-query-injection.rule.yaml +10 -0
  404. package/rules/typescript/ts.security.electron-dangerous-webpreferences.rule.yaml +10 -0
  405. package/rules/typescript/ts.security.electron-insecure-local-state.rule.yaml +10 -0
  406. package/rules/typescript/ts.security.electron-missing-ipc-origin-check.rule.yaml +10 -0
  407. package/rules/typescript/ts.security.electron-shell-open-external-unvalidated.rule.yaml +13 -0
  408. package/rules/typescript/ts.security.exposed-directory-listing.rule.yaml +10 -0
  409. package/rules/typescript/ts.security.express-cookie-missing-http-only.rule.yaml +16 -0
  410. package/rules/typescript/ts.security.express-default-cookie-config.rule.yaml +16 -0
  411. package/rules/typescript/ts.security.express-default-session-config.rule.yaml +16 -0
  412. package/rules/typescript/ts.security.express-error-handler-information-disclosure.rule.yaml +16 -0
  413. package/rules/typescript/ts.security.express-insecure-cookie.rule.yaml +16 -0
  414. package/rules/typescript/ts.security.express-missing-helmet.rule.yaml +16 -0
  415. package/rules/typescript/ts.security.express-nosql-injection.rule.yaml +16 -0
  416. package/rules/typescript/ts.security.express-permissive-cookie-config.rule.yaml +16 -0
  417. package/rules/typescript/ts.security.express-permissive-cors.rule.yaml +52 -0
  418. package/rules/typescript/ts.security.express-reduce-fingerprint.rule.yaml +16 -0
  419. package/rules/typescript/ts.security.express-static-assets-after-session.rule.yaml +16 -0
  420. package/rules/typescript/ts.security.express-static-dotfiles-allow.rule.yaml +16 -0
  421. package/rules/typescript/ts.security.express-unbounded-body-parser.rule.yaml +16 -0
  422. package/rules/typescript/ts.security.express-user-controlled-static-mount.rule.yaml +16 -0
  423. package/rules/typescript/ts.security.external-file-upload.rule.yaml +10 -0
  424. package/rules/typescript/ts.security.fastify-excessive-body-limit.rule.yaml +16 -0
  425. package/rules/typescript/ts.security.fastify-public-bind-without-trust-proxy.rule.yaml +16 -0
  426. package/rules/typescript/ts.security.file-generation.rule.yaml +10 -0
  427. package/rules/typescript/ts.security.format-string-using-user-input.rule.yaml +10 -0
  428. package/rules/typescript/ts.security.frontend-only-authorization.rule.yaml +10 -0
  429. package/rules/typescript/ts.security.graphql-upload-without-csrf-guard.rule.yaml +16 -0
  430. package/rules/typescript/ts.security.handlebars-no-escape.rule.yaml +10 -0
  431. package/rules/typescript/ts.security.hardcoded-auth-secret.rule.yaml +10 -0
  432. package/rules/typescript/ts.security.iframe-missing-sandbox-attribute.rule.yaml +10 -0
  433. package/rules/typescript/ts.security.import-using-user-input.rule.yaml +10 -0
  434. package/rules/typescript/ts.security.information-leakage.rule.yaml +10 -0
  435. package/rules/typescript/ts.security.insecure-allow-origin.rule.yaml +10 -0
  436. package/rules/typescript/ts.security.insecure-auth-cookie-flags.rule.yaml +10 -0
  437. package/rules/typescript/ts.security.insecure-content-security-policy-literal.rule.yaml +10 -0
  438. package/rules/typescript/ts.security.insecure-helmet-hardening-options.rule.yaml +10 -0
  439. package/rules/typescript/ts.security.insecure-password-hash-configuration.rule.yaml +10 -0
  440. package/rules/typescript/ts.security.insecure-websocket-transport.rule.yaml +10 -0
  441. package/rules/typescript/ts.security.insufficiently-random-values.rule.yaml +10 -0
  442. package/rules/typescript/ts.security.jwt-insecure-signing-algorithm.rule.yaml +10 -0
  443. package/rules/typescript/ts.security.jwt-not-revoked.rule.yaml +10 -0
  444. package/rules/typescript/ts.security.jwt-sensitive-claims.rule.yaml +10 -0
  445. package/rules/typescript/ts.security.legacy-buffer-constructor.rule.yaml +10 -0
  446. package/rules/typescript/ts.security.log-injection.rule.yaml +10 -0
  447. package/rules/typescript/ts.security.manual-html-sanitization.rule.yaml +10 -0
  448. package/rules/typescript/ts.security.missing-authorization-before-sensitive-action.rule.yaml +10 -0
  449. package/rules/typescript/ts.security.missing-integrity-check.rule.yaml +10 -0
  450. package/rules/typescript/ts.security.missing-message-origin-check.rule.yaml +10 -0
  451. package/rules/typescript/ts.security.missing-ownership-validation.rule.yaml +10 -0
  452. package/rules/typescript/ts.security.missing-request-timeout-or-retry.rule.yaml +10 -0
  453. package/rules/typescript/ts.security.nestjs-helmet-after-route-mount.rule.yaml +16 -0
  454. package/rules/typescript/ts.security.nestjs-missing-global-validation-pipe.rule.yaml +16 -0
  455. package/rules/typescript/ts.security.nestjs-skip-throttle-sensitive-route.rule.yaml +16 -0
  456. package/rules/typescript/ts.security.nestjs-validation-pipe-without-whitelist.rule.yaml +16 -0
  457. package/rules/typescript/ts.security.no-alert-confirm-prompt.rule.yaml +44 -0
  458. package/rules/typescript/ts.security.no-arguments-callee.rule.yaml +44 -0
  459. package/rules/typescript/ts.security.no-assign-mutable-export.rule.yaml +45 -0
  460. package/rules/typescript/ts.security.no-dynamic-execution.rule.yaml +10 -0
  461. package/rules/typescript/ts.security.no-fs-readfile-sync-in-handler.rule.yaml +46 -0
  462. package/rules/typescript/ts.security.no-global-native-reassignment.rule.yaml +44 -0
  463. package/rules/typescript/ts.security.no-innerhtml-assignment.rule.yaml +10 -0
  464. package/rules/typescript/ts.security.no-javascript-url.rule.yaml +44 -0
  465. package/rules/typescript/ts.security.no-native-prototype-extension.rule.yaml +44 -0
  466. package/rules/typescript/ts.security.no-sync-child-process-exec.rule.yaml +45 -0
  467. package/rules/typescript/ts.security.no-throw-literal.rule.yaml +44 -0
  468. package/rules/typescript/ts.security.no-with-statement.rule.yaml +44 -0
  469. package/rules/typescript/ts.security.non-literal-fs-filename.rule.yaml +10 -0
  470. package/rules/typescript/ts.security.nuxt-public-runtime-secret.rule.yaml +13 -0
  471. package/rules/typescript/ts.security.observable-timing-discrepancy.rule.yaml +10 -0
  472. package/rules/typescript/ts.security.open-redirect.rule.yaml +10 -0
  473. package/rules/typescript/ts.security.permissive-allow-origin.rule.yaml +10 -0
  474. package/rules/typescript/ts.security.permissive-file-permissions.rule.yaml +10 -0
  475. package/rules/typescript/ts.security.postmessage-wildcard-origin.rule.yaml +10 -0
  476. package/rules/typescript/ts.security.predictable-token-generation.rule.yaml +10 -0
  477. package/rules/typescript/ts.security.raw-html-using-user-input.rule.yaml +10 -0
  478. package/rules/typescript/ts.security.request-driven-array-index-access.rule.yaml +10 -0
  479. package/rules/typescript/ts.security.sensitive-data-egress.rule.yaml +10 -0
  480. package/rules/typescript/ts.security.sensitive-data-in-exception.rule.yaml +10 -0
  481. package/rules/typescript/ts.security.sensitive-data-written-to-file.rule.yaml +10 -0
  482. package/rules/typescript/ts.security.ssrf.rule.yaml +10 -0
  483. package/rules/typescript/ts.security.token-or-session-not-validated.rule.yaml +10 -0
  484. package/rules/typescript/ts.security.ui-redress.rule.yaml +10 -0
  485. package/rules/typescript/ts.security.unsafe-dirname-path-concat.rule.yaml +44 -0
  486. package/rules/typescript/ts.security.unsafe-dompurify-version.rule.yaml +10 -0
  487. package/rules/typescript/ts.security.unsafe-marked-version.rule.yaml +10 -0
  488. package/rules/typescript/ts.security.unsanitized-http-response.rule.yaml +10 -0
  489. package/rules/typescript/ts.security.unvalidated-external-input.rule.yaml +10 -0
  490. package/rules/typescript/ts.security.user-controlled-sendfile.rule.yaml +10 -0
  491. package/rules/typescript/ts.security.user-controlled-view-render.rule.yaml +10 -0
  492. package/rules/typescript/ts.security.weak-cipher-or-mode.rule.yaml +10 -0
  493. package/rules/typescript/ts.security.weak-key-strength.rule.yaml +10 -0
  494. package/rules/typescript/ts.security.weak-tls-version.rule.yaml +10 -0
  495. package/rules/typescript/ts.security.xml-parse-string-with-untrusted-input.rule.yaml +10 -0
package/catalog.yaml CHANGED
@@ -21,6 +21,11 @@ rules:
21
21
  presets:
22
22
  - recommended
23
23
  - strict
24
+ - id: ts.correctness.control-flow-in-finally
25
+ rulePath: ./rules/typescript/ts.correctness.control-flow-in-finally.rule.yaml
26
+ presets:
27
+ - recommended
28
+ - strict
24
29
  - id: ts.correctness.missing-await-on-async-call
25
30
  rulePath: ./rules/typescript/ts.correctness.missing-await-on-async-call.rule.yaml
26
31
  presets:
@@ -42,6 +47,11 @@ rules:
42
47
  presets:
43
48
  - recommended
44
49
  - strict
50
+ - id: ts.correctness.invalid-typeof-comparison
51
+ rulePath: ./rules/typescript/ts.correctness.invalid-typeof-comparison.rule.yaml
52
+ presets:
53
+ - recommended
54
+ - strict
45
55
  - id: ts.correctness.blocking-call-in-async-flow
46
56
  rulePath: ./rules/typescript/ts.correctness.blocking-call-in-async-flow.rule.yaml
47
57
  presets:
@@ -52,6 +62,11 @@ rules:
52
62
  presets:
53
63
  - recommended
54
64
  - strict
65
+ - id: ts.correctness.missing-super-call
66
+ rulePath: ./rules/typescript/ts.correctness.missing-super-call.rule.yaml
67
+ presets:
68
+ - recommended
69
+ - strict
55
70
  - id: ts.correctness.missing-timeout-on-external-call
56
71
  rulePath: ./rules/typescript/ts.correctness.missing-timeout-on-external-call.rule.yaml
57
72
  presets:
@@ -63,6 +78,11 @@ rules:
63
78
  presets:
64
79
  - recommended
65
80
  - strict
81
+ - id: ts.correctness.promise-reject-non-error
82
+ rulePath: ./rules/typescript/ts.correctness.promise-reject-non-error.rule.yaml
83
+ presets:
84
+ - recommended
85
+ - strict
66
86
  - id: ts.correctness.nested-property-access-without-check
67
87
  rulePath: ./rules/typescript/ts.correctness.nested-property-access-without-check.rule.yaml
68
88
  presets:
@@ -87,11 +107,26 @@ rules:
87
107
  rulePath: ./rules/typescript/ts.correctness.shared-state-race.rule.yaml
88
108
  presets:
89
109
  - experimental
110
+ - id: ts.correctness.this-before-super
111
+ rulePath: ./rules/typescript/ts.correctness.this-before-super.rule.yaml
112
+ presets:
113
+ - recommended
114
+ - strict
90
115
  - id: ts.correctness.unreachable-statement
91
116
  rulePath: ./rules/typescript/ts.correctness.unreachable-statement.rule.yaml
92
117
  presets:
93
118
  - recommended
94
119
  - strict
120
+ - id: ts.correctness.array-callback-missing-return
121
+ rulePath: ./rules/typescript/ts.correctness.array-callback-missing-return.rule.yaml
122
+ presets:
123
+ - recommended
124
+ - strict
125
+ - id: ts.correctness.array-sort-without-compare
126
+ rulePath: ./rules/typescript/ts.correctness.array-sort-without-compare.rule.yaml
127
+ presets:
128
+ - recommended
129
+ - strict
95
130
  - id: ts.correctness.assignment-in-condition
96
131
  rulePath: ./rules/typescript/ts.correctness.assignment-in-condition.rule.yaml
97
132
  presets:
@@ -102,6 +137,11 @@ rules:
102
137
  presets:
103
138
  - recommended
104
139
  - strict
140
+ - id: ts.correctness.duplicate-if-else-condition
141
+ rulePath: ./rules/typescript/ts.correctness.duplicate-if-else-condition.rule.yaml
142
+ presets:
143
+ - recommended
144
+ - strict
105
145
  - id: ts.correctness.duplicate-object-key
106
146
  rulePath: ./rules/typescript/ts.correctness.duplicate-object-key.rule.yaml
107
147
  presets:
@@ -117,6 +157,36 @@ rules:
117
157
  presets:
118
158
  - recommended
119
159
  - strict
160
+ - id: ts.correctness.infinite-loop
161
+ rulePath: ./rules/typescript/ts.correctness.infinite-loop.rule.yaml
162
+ presets:
163
+ - recommended
164
+ - strict
165
+ - id: ts.correctness.unnecessary-return-await
166
+ rulePath: ./rules/typescript/ts.correctness.unnecessary-return-await.rule.yaml
167
+ presets:
168
+ - recommended
169
+ - strict
170
+ - id: ts.correctness.invalid-await-expression
171
+ rulePath: ./rules/typescript/ts.correctness.invalid-await-expression.rule.yaml
172
+ presets:
173
+ - recommended
174
+ - strict
175
+ - id: ts.correctness.missing-async-on-promise-method
176
+ rulePath: ./rules/typescript/ts.correctness.missing-async-on-promise-method.rule.yaml
177
+ presets:
178
+ - recommended
179
+ - strict
180
+ - id: ts.correctness.no-floating-promise-in-function
181
+ rulePath: ./rules/typescript/ts.correctness.no-floating-promise-in-function.rule.yaml
182
+ presets:
183
+ - recommended
184
+ - strict
185
+ - id: ts.correctness.no-misused-promises
186
+ rulePath: ./rules/typescript/ts.correctness.no-misused-promises.rule.yaml
187
+ presets:
188
+ - recommended
189
+ - strict
120
190
  - id: ts.correctness.assignment-to-import-binding
121
191
  rulePath: ./rules/typescript/ts.correctness.assignment-to-import-binding.rule.yaml
122
192
  presets:
@@ -142,6 +212,11 @@ rules:
142
212
  presets:
143
213
  - recommended
144
214
  - strict
215
+ - id: ts.correctness.for-in-on-array
216
+ rulePath: ./rules/typescript/ts.correctness.for-in-on-array.rule.yaml
217
+ presets:
218
+ - recommended
219
+ - strict
145
220
  - id: ts.correctness.reassign-catch-binding
146
221
  rulePath: ./rules/typescript/ts.correctness.reassign-catch-binding.rule.yaml
147
222
  presets:
@@ -152,6 +227,11 @@ rules:
152
227
  presets:
153
228
  - recommended
154
229
  - strict
230
+ - id: ts.correctness.use-number-is-nan
231
+ rulePath: ./rules/typescript/ts.correctness.use-number-is-nan.rule.yaml
232
+ presets:
233
+ - recommended
234
+ - strict
155
235
  - id: ts.quality.swallowed-error
156
236
  rulePath: ./rules/typescript/ts.quality.swallowed-error.rule.yaml
157
237
  presets:
@@ -237,6 +317,11 @@ rules:
237
317
  rulePath: ./rules/typescript/ts.quality.no-dead-export.rule.yaml
238
318
  presets:
239
319
  - strict
320
+ - id: ts.quality.no-empty-function
321
+ rulePath: ./rules/typescript/ts.quality.no-empty-function.rule.yaml
322
+ presets:
323
+ - recommended
324
+ - strict
240
325
  - id: ts.testing.no-focused-test
241
326
  rulePath: ./rules/typescript/ts.testing.no-focused-test.rule.yaml
242
327
  presets:
@@ -369,6 +454,11 @@ rules:
369
454
  presets:
370
455
  - recommended
371
456
  - strict
457
+ - id: ts.performance.no-await-in-loop
458
+ rulePath: ./rules/typescript/ts.performance.no-await-in-loop.rule.yaml
459
+ presets:
460
+ - recommended
461
+ - strict
372
462
  - id: ts.performance.no-cache-miss-from-unstable-key
373
463
  rulePath: ./rules/typescript/ts.performance.no-cache-miss-from-unstable-key.rule.yaml
374
464
  presets:
@@ -398,6 +488,131 @@ rules:
398
488
  rulePath: ./rules/java/java.performance.no-unbounded-concurrency.rule.yaml
399
489
  presets:
400
490
  - strict
491
+ - id: php.correctness.duplicate-array-key
492
+ rulePath: ./rules/php/php.correctness.duplicate-array-key.rule.yaml
493
+ presets:
494
+ - strict
495
+ - id: php.correctness.error-suppression-operator
496
+ rulePath: ./rules/php/php.correctness.error-suppression-operator.rule.yaml
497
+ presets:
498
+ - strict
499
+ - id: php.correctness.nullsafe-returned-by-reference
500
+ rulePath: ./rules/php/php.correctness.nullsafe-returned-by-reference.rule.yaml
501
+ presets:
502
+ - strict
503
+ - id: php.correctness.switch-multiple-default
504
+ rulePath: ./rules/php/php.correctness.switch-multiple-default.rule.yaml
505
+ presets:
506
+ - strict
507
+ - id: php.correctness.unreachable-after-return
508
+ rulePath: ./rules/php/php.correctness.unreachable-after-return.rule.yaml
509
+ presets:
510
+ - strict
511
+
512
+ - id: php.security.unsafe-new-static
513
+ rulePath: ./rules/php/php.security.unsafe-new-static.rule.yaml
514
+ presets:
515
+ - strict
516
+ - id: php.correctness.empty-array-literal-slot
517
+ rulePath: ./rules/php/php.correctness.empty-array-literal-slot.rule.yaml
518
+ presets:
519
+ - strict
520
+ - id: php.correctness.empty-bracket-array-access
521
+ rulePath: ./rules/php/php.correctness.empty-bracket-array-access.rule.yaml
522
+ presets:
523
+ - strict
524
+ - id: php.correctness.deprecated-unset-cast
525
+ rulePath: ./rules/php/php.correctness.deprecated-unset-cast.rule.yaml
526
+ presets:
527
+ - strict
528
+ - id: php.correctness.duplicate-declaration
529
+ rulePath: ./rules/php/php.correctness.duplicate-declaration.rule.yaml
530
+ presets:
531
+ - strict
532
+ - id: php.correctness.nested-function-declaration
533
+ rulePath: ./rules/php/php.correctness.nested-function-declaration.rule.yaml
534
+ presets:
535
+ - strict
536
+ - id: php.correctness.break-continue-outside-loop
537
+ rulePath: ./rules/php/php.correctness.break-continue-outside-loop.rule.yaml
538
+ presets:
539
+ - strict
540
+ - id: php.correctness.abstract-method-outside-abstract-class
541
+ rulePath: ./rules/php/php.correctness.abstract-method-outside-abstract-class.rule.yaml
542
+ presets:
543
+ - strict
544
+ - id: php.correctness.useless-unset
545
+ rulePath: ./rules/php/php.correctness.useless-unset.rule.yaml
546
+ presets:
547
+ - strict
548
+ - id: php.correctness.invalid-regex-literal
549
+ rulePath: ./rules/php/php.correctness.invalid-regex-literal.rule.yaml
550
+ presets:
551
+ - strict
552
+ - id: php.correctness.todo-fixme-marker
553
+ rulePath: ./rules/php/php.correctness.todo-fixme-marker.rule.yaml
554
+ presets:
555
+ - strict
556
+ - id: php.correctness.self-assignment
557
+ rulePath: ./rules/php/php.correctness.self-assignment.rule.yaml
558
+ presets:
559
+ - strict
560
+ - id: php.correctness.default-parameter-not-last
561
+ rulePath: ./rules/php/php.correctness.default-parameter-not-last.rule.yaml
562
+ presets:
563
+ - strict
564
+ - id: php.correctness.empty-function-body
565
+ rulePath: ./rules/php/php.correctness.empty-function-body.rule.yaml
566
+ presets:
567
+ - strict
568
+ - id: php.correctness.unknown-magic-method
569
+ rulePath: ./rules/php/php.correctness.unknown-magic-method.rule.yaml
570
+ presets:
571
+ - strict
572
+ - id: php.correctness.case-insensitive-define
573
+ rulePath: ./rules/php/php.correctness.case-insensitive-define.rule.yaml
574
+ presets:
575
+ - strict
576
+ - id: php.correctness.deprecated-filter-constant
577
+ rulePath: ./rules/php/php.correctness.deprecated-filter-constant.rule.yaml
578
+ presets:
579
+ - strict
580
+ - id: php.correctness.empty-code-block
581
+ rulePath: ./rules/php/php.correctness.empty-code-block.rule.yaml
582
+ presets:
583
+ - strict
584
+ - id: php.correctness.deprecated-libxml-entity-loader
585
+ rulePath: ./rules/php/php.correctness.deprecated-libxml-entity-loader.rule.yaml
586
+ presets:
587
+ - strict
588
+ - id: php.correctness.redundant-string-cast-concat
589
+ rulePath: ./rules/php/php.correctness.redundant-string-cast-concat.rule.yaml
590
+ presets:
591
+ - strict
592
+ - id: php.correctness.missing-member-visibility
593
+ rulePath: ./rules/php/php.correctness.missing-member-visibility.rule.yaml
594
+ presets:
595
+ - strict
596
+ - id: php.correctness.function-comparison
597
+ rulePath: ./rules/php/php.correctness.function-comparison.rule.yaml
598
+ presets:
599
+ - strict
600
+ - id: php.correctness.useless-post-increment
601
+ rulePath: ./rules/php/php.correctness.useless-post-increment.rule.yaml
602
+ presets:
603
+ - strict
604
+ - id: php.correctness.nested-switch
605
+ rulePath: ./rules/php/php.correctness.nested-switch.rule.yaml
606
+ presets:
607
+ - strict
608
+ - id: php.correctness.invalid-cookie-options
609
+ rulePath: ./rules/php/php.correctness.invalid-cookie-options.rule.yaml
610
+ presets:
611
+ - strict
612
+ - id: php.performance.expensive-loop-condition
613
+ rulePath: ./rules/php/php.performance.expensive-loop-condition.rule.yaml
614
+ presets:
615
+ - strict
401
616
  - id: php.performance.no-regex-construction-in-loop
402
617
  rulePath: ./rules/php/php.performance.no-regex-construction-in-loop.rule.yaml
403
618
  presets:
@@ -422,6 +637,31 @@ rules:
422
637
  rulePath: ./rules/python/py.performance.no-unbounded-concurrency.rule.yaml
423
638
  presets:
424
639
  - strict
640
+ - id: py.correctness.assert-on-tuple
641
+ rulePath: ./rules/python/py.correctness.assert-on-tuple.rule.yaml
642
+ presets:
643
+ - recommended
644
+ - strict
645
+ - id: py.correctness.bare-except
646
+ rulePath: ./rules/python/py.correctness.bare-except.rule.yaml
647
+ presets:
648
+ - recommended
649
+ - strict
650
+ - id: py.correctness.broad-exception-handler
651
+ rulePath: ./rules/python/py.correctness.broad-exception-handler.rule.yaml
652
+ presets:
653
+ - recommended
654
+ - strict
655
+ - id: py.correctness.dangerous-mutable-default
656
+ rulePath: ./rules/python/py.correctness.dangerous-mutable-default.rule.yaml
657
+ presets:
658
+ - recommended
659
+ - strict
660
+ - id: py.correctness.duplicate-dict-key
661
+ rulePath: ./rules/python/py.correctness.duplicate-dict-key.rule.yaml
662
+ presets:
663
+ - recommended
664
+ - strict
425
665
  - id: ruby.performance.no-regex-construction-in-loop
426
666
  rulePath: ./rules/ruby/ruby.performance.no-regex-construction-in-loop.rule.yaml
427
667
  presets:
@@ -434,6 +674,34 @@ rules:
434
674
  rulePath: ./rules/ruby/ruby.performance.no-unbounded-concurrency.rule.yaml
435
675
  presets:
436
676
  - strict
677
+ - id: rust.correctness.block-on-in-async
678
+ rulePath: ./rules/rust/rust.correctness.block-on-in-async.rule.yaml
679
+ presets:
680
+ - strict
681
+ - id: rust.correctness.forget-join-handle
682
+ rulePath: ./rules/rust/rust.correctness.forget-join-handle.rule.yaml
683
+ presets:
684
+ - strict
685
+ - id: rust.correctness.mutex-held-across-await
686
+ rulePath: ./rules/rust/rust.correctness.mutex-held-across-await.rule.yaml
687
+ presets:
688
+ - strict
689
+ - id: rust.correctness.std-mutex-in-async-fn
690
+ rulePath: ./rules/rust/rust.correctness.std-mutex-in-async-fn.rule.yaml
691
+ presets:
692
+ - strict
693
+ - id: rust.correctness.thread-sleep-in-async
694
+ rulePath: ./rules/rust/rust.correctness.thread-sleep-in-async.rule.yaml
695
+ presets:
696
+ - strict
697
+ - id: rust.correctness.unbounded-channel
698
+ rulePath: ./rules/rust/rust.correctness.unbounded-channel.rule.yaml
699
+ presets:
700
+ - strict
701
+ - id: rust.correctness.unchecked-index
702
+ rulePath: ./rules/rust/rust.correctness.unchecked-index.rule.yaml
703
+ presets:
704
+ - strict
437
705
  - id: rust.performance.no-regex-construction-in-loop
438
706
  rulePath: ./rules/rust/rust.performance.no-regex-construction-in-loop.rule.yaml
439
707
  presets:
@@ -540,6 +808,52 @@ rules:
540
808
  rulePath: ./rules/typescript/ts.react.no-deprecated-create-factory.rule.yaml
541
809
  presets:
542
810
  - strict
811
+ - id: ts.react.no-bind-in-jsx-props
812
+ rulePath: ./rules/typescript/ts.react.no-bind-in-jsx-props.rule.yaml
813
+ presets:
814
+ - recommended
815
+ - strict
816
+ - id: ts.react.no-jsx-props-spread
817
+ rulePath: ./rules/typescript/ts.react.no-jsx-props-spread.rule.yaml
818
+ presets:
819
+ - recommended
820
+ - strict
821
+ - id: ts.react.no-children-prop
822
+ rulePath: ./rules/typescript/ts.react.no-children-prop.rule.yaml
823
+ presets:
824
+ - recommended
825
+ - strict
826
+ - id: ts.react.no-set-state-in-component-did-mount
827
+ rulePath: ./rules/typescript/ts.react.no-set-state-in-component-did-mount.rule.yaml
828
+ presets:
829
+ - recommended
830
+ - strict
831
+ - id: ts.react.no-set-state-in-component-did-update
832
+ rulePath: ./rules/typescript/ts.react.no-set-state-in-component-did-update.rule.yaml
833
+ presets:
834
+ - recommended
835
+ - strict
836
+ - id: ts.react.no-direct-state-mutation
837
+ rulePath: ./rules/typescript/ts.react.no-direct-state-mutation.rule.yaml
838
+ presets:
839
+ - recommended
840
+ - strict
841
+ - id: ts.react.no-target-blank-without-rel
842
+ rulePath: ./rules/typescript/ts.react.no-target-blank-without-rel.rule.yaml
843
+ presets:
844
+ - recommended
845
+ - strict
846
+ - security
847
+ - id: ts.react.no-duplicate-jsx-attributes
848
+ rulePath: ./rules/typescript/ts.react.no-duplicate-jsx-attributes.rule.yaml
849
+ presets:
850
+ - recommended
851
+ - strict
852
+ - id: ts.react.no-this-in-function-component
853
+ rulePath: ./rules/typescript/ts.react.no-this-in-function-component.rule.yaml
854
+ presets:
855
+ - recommended
856
+ - strict
543
857
  - id: security.no-sql-interpolation
544
858
  rulePath: ./rules/shared/security.no-sql-interpolation.rule.yaml
545
859
  presets:
@@ -552,6 +866,60 @@ rules:
552
866
  - recommended
553
867
  - strict
554
868
  - security
869
+ - id: ts.security.no-with-statement
870
+ rulePath: ./rules/typescript/ts.security.no-with-statement.rule.yaml
871
+ presets:
872
+ - recommended
873
+ - strict
874
+ - security
875
+ - id: ts.security.no-arguments-callee
876
+ rulePath: ./rules/typescript/ts.security.no-arguments-callee.rule.yaml
877
+ presets:
878
+ - recommended
879
+ - strict
880
+ - security
881
+ - id: ts.security.no-javascript-url
882
+ rulePath: ./rules/typescript/ts.security.no-javascript-url.rule.yaml
883
+ presets:
884
+ - recommended
885
+ - strict
886
+ - security
887
+ - id: ts.security.no-native-prototype-extension
888
+ rulePath: ./rules/typescript/ts.security.no-native-prototype-extension.rule.yaml
889
+ presets:
890
+ - recommended
891
+ - strict
892
+ - security
893
+ - id: ts.security.no-global-native-reassignment
894
+ rulePath: ./rules/typescript/ts.security.no-global-native-reassignment.rule.yaml
895
+ presets:
896
+ - recommended
897
+ - strict
898
+ - security
899
+ - id: ts.security.no-throw-literal
900
+ rulePath: ./rules/typescript/ts.security.no-throw-literal.rule.yaml
901
+ presets:
902
+ - recommended
903
+ - strict
904
+ - security
905
+ - id: ts.security.no-alert-confirm-prompt
906
+ rulePath: ./rules/typescript/ts.security.no-alert-confirm-prompt.rule.yaml
907
+ presets:
908
+ - recommended
909
+ - strict
910
+ - security
911
+ - id: ts.runtime.no-process-exit
912
+ rulePath: ./rules/typescript/ts.runtime.no-process-exit.rule.yaml
913
+ presets:
914
+ - recommended
915
+ - strict
916
+ - security
917
+ - id: ts.security.unsafe-dirname-path-concat
918
+ rulePath: ./rules/typescript/ts.security.unsafe-dirname-path-concat.rule.yaml
919
+ presets:
920
+ - recommended
921
+ - strict
922
+ - security
555
923
  - id: security.no-request-path-file-read
556
924
  rulePath: ./rules/shared/security.no-request-path-file-read.rule.yaml
557
925
  presets:
@@ -1013,6 +1381,28 @@ rules:
1013
1381
  presets:
1014
1382
  - strict
1015
1383
  - security
1384
+ - id: ts.security.express-permissive-cors
1385
+ rulePath: ./rules/typescript/ts.security.express-permissive-cors.rule.yaml
1386
+ presets:
1387
+ - strict
1388
+ - security
1389
+ - id: ts.security.no-sync-child-process-exec
1390
+ rulePath: ./rules/typescript/ts.security.no-sync-child-process-exec.rule.yaml
1391
+ presets:
1392
+ - recommended
1393
+ - strict
1394
+ - security
1395
+ - id: ts.security.no-fs-readfile-sync-in-handler
1396
+ rulePath: ./rules/typescript/ts.security.no-fs-readfile-sync-in-handler.rule.yaml
1397
+ presets:
1398
+ - recommended
1399
+ - strict
1400
+ - security
1401
+ - id: ts.security.no-assign-mutable-export
1402
+ rulePath: ./rules/typescript/ts.security.no-assign-mutable-export.rule.yaml
1403
+ presets:
1404
+ - strict
1405
+ - security
1016
1406
  - id: ts.security.request-driven-array-index-access
1017
1407
  rulePath: ./rules/typescript/ts.security.request-driven-array-index-access.rule.yaml
1018
1408
  presets:
@@ -1195,11 +1585,66 @@ rules:
1195
1585
  presets:
1196
1586
  - strict
1197
1587
  - security
1588
+ - id: py.security.flask-debug-enabled
1589
+ rulePath: ./rules/python/py.security.flask-debug-enabled.rule.yaml
1590
+ presets:
1591
+ - strict
1592
+ - security
1593
+ - id: py.security.django-mark-safe
1594
+ rulePath: ./rules/python/py.security.django-mark-safe.rule.yaml
1595
+ presets:
1596
+ - strict
1597
+ - security
1598
+ - id: py.security.django-format-html-unsafe
1599
+ rulePath: ./rules/python/py.security.django-format-html-unsafe.rule.yaml
1600
+ presets:
1601
+ - strict
1602
+ - security
1603
+ - id: py.security.django-security-middleware-missing
1604
+ rulePath: ./rules/python/py.security.django-security-middleware-missing.rule.yaml
1605
+ presets:
1606
+ - strict
1607
+ - security
1198
1608
  - id: py.security.fastapi-insecure-cors
1199
1609
  rulePath: ./rules/python/py.security.fastapi-insecure-cors.rule.yaml
1200
1610
  presets:
1201
1611
  - strict
1202
1612
  - security
1613
+ - id: py.security.subprocess-shell-enabled
1614
+ rulePath: ./rules/python/py.security.subprocess-shell-enabled.rule.yaml
1615
+ presets:
1616
+ - strict
1617
+ - security
1618
+ - id: py.security.dynamic-code-execution
1619
+ rulePath: ./rules/python/py.security.dynamic-code-execution.rule.yaml
1620
+ presets:
1621
+ - strict
1622
+ - security
1623
+ - id: py.security.insecure-yaml-load
1624
+ rulePath: ./rules/python/py.security.insecure-yaml-load.rule.yaml
1625
+ presets:
1626
+ - strict
1627
+ - security
1628
+ - id: py.security.insecure-temp-file
1629
+ rulePath: ./rules/python/py.security.insecure-temp-file.rule.yaml
1630
+ presets:
1631
+ - strict
1632
+ - security
1633
+ - id: py.security.bind-all-interfaces
1634
+ rulePath: ./rules/python/py.security.bind-all-interfaces.rule.yaml
1635
+ presets:
1636
+ - strict
1637
+ - security
1638
+ - id: py.security.debugger-import
1639
+ rulePath: ./rules/python/py.security.debugger-import.rule.yaml
1640
+ presets:
1641
+ - strict
1642
+ - security
1643
+ - id: py.security.jinja-autoescape-disabled
1644
+ rulePath: ./rules/python/py.security.jinja-autoescape-disabled.rule.yaml
1645
+ presets:
1646
+ - strict
1647
+ - security
1203
1648
  - id: java.security.android-screenshot-exposure
1204
1649
  rulePath: ./rules/java/java.security.android-screenshot-exposure.rule.yaml
1205
1650
  presets:
@@ -1263,6 +1708,149 @@ rules:
1263
1708
  presets:
1264
1709
  - strict
1265
1710
  - security
1711
+ - id: java.security.unsafe-jackson-deserialization
1712
+ rulePath: ./rules/java/java.security.unsafe-jackson-deserialization.rule.yaml
1713
+ presets:
1714
+ - strict
1715
+ - security
1716
+ - id: java.security.xxe-document-builder
1717
+ rulePath: ./rules/java/java.security.xxe-document-builder.rule.yaml
1718
+ presets:
1719
+ - strict
1720
+ - security
1721
+ - id: java.security.xxe-xml-input-factory
1722
+ rulePath: ./rules/java/java.security.xxe-xml-input-factory.rule.yaml
1723
+ presets:
1724
+ - strict
1725
+ - security
1726
+ - id: java.security.hibernate-sql-concatenation
1727
+ rulePath: ./rules/java/java.security.hibernate-sql-concatenation.rule.yaml
1728
+ presets:
1729
+ - strict
1730
+ - security
1731
+ - id: java.security.shell-runtime-exec
1732
+ rulePath: ./rules/java/java.security.shell-runtime-exec.rule.yaml
1733
+ presets:
1734
+ - strict
1735
+ - security
1736
+ - id: java.security.predictable-securerandom
1737
+ rulePath: ./rules/java/java.security.predictable-securerandom.rule.yaml
1738
+ presets:
1739
+ - strict
1740
+ - security
1741
+ - id: java.correctness.empty-catch
1742
+ rulePath: ./rules/java/java.correctness.empty-catch.rule.yaml
1743
+ presets:
1744
+ - strict
1745
+ - id: java.correctness.equals-on-array
1746
+ rulePath: ./rules/java/java.correctness.equals-on-array.rule.yaml
1747
+ presets:
1748
+ - strict
1749
+ - id: java.correctness.sync-on-string-literal
1750
+ rulePath: ./rules/java/java.correctness.sync-on-string-literal.rule.yaml
1751
+ presets:
1752
+ - strict
1753
+ - id: java.correctness.catch-null-pointer
1754
+ rulePath: ./rules/java/java.correctness.catch-null-pointer.rule.yaml
1755
+ presets:
1756
+ - strict
1757
+ - id: java.correctness.unsafe-optional-get
1758
+ rulePath: ./rules/java/java.correctness.unsafe-optional-get.rule.yaml
1759
+ presets:
1760
+ - strict
1761
+ - id: java.correctness.return-in-finally
1762
+ rulePath: ./rules/java/java.correctness.return-in-finally.rule.yaml
1763
+ presets:
1764
+ - strict
1765
+ - id: java.security.insecure-cipher-mode
1766
+ rulePath: ./rules/java/java.security.insecure-cipher-mode.rule.yaml
1767
+ presets:
1768
+ - strict
1769
+ - security
1770
+ - id: java.security.weak-rsa-key-size
1771
+ rulePath: ./rules/java/java.security.weak-rsa-key-size.rule.yaml
1772
+ presets:
1773
+ - strict
1774
+ - security
1775
+ - id: java.security.insecure-ssl-context
1776
+ rulePath: ./rules/java/java.security.insecure-ssl-context.rule.yaml
1777
+ presets:
1778
+ - strict
1779
+ - security
1780
+ - id: java.security.permissive-cors
1781
+ rulePath: ./rules/java/java.security.permissive-cors.rule.yaml
1782
+ presets:
1783
+ - strict
1784
+ - security
1785
+ - id: java.security.trust-all-certificates
1786
+ rulePath: ./rules/java/java.security.trust-all-certificates.rule.yaml
1787
+ presets:
1788
+ - strict
1789
+ - security
1790
+ - id: java.security.insecure-network-protocol
1791
+ rulePath: ./rules/java/java.security.insecure-network-protocol.rule.yaml
1792
+ presets:
1793
+ - strict
1794
+ - security
1795
+ - id: java.security.null-cipher
1796
+ rulePath: ./rules/java/java.security.null-cipher.rule.yaml
1797
+ presets:
1798
+ - strict
1799
+ - security
1800
+ - id: java.security.jwt-without-verification
1801
+ rulePath: ./rules/java/java.security.jwt-without-verification.rule.yaml
1802
+ presets:
1803
+ - strict
1804
+ - security
1805
+ - id: ruby.bug-risk.assignment-in-condition
1806
+ rulePath: ./rules/ruby/ruby.bug-risk.assignment-in-condition.rule.yaml
1807
+ presets:
1808
+ - strict
1809
+ - id: ruby.bug-risk.deprecated-uri-escape
1810
+ rulePath: ./rules/ruby/ruby.bug-risk.deprecated-uri-escape.rule.yaml
1811
+ presets:
1812
+ - strict
1813
+ - id: ruby.bug-risk.division-by-zero
1814
+ rulePath: ./rules/ruby/ruby.bug-risk.division-by-zero.rule.yaml
1815
+ presets:
1816
+ - strict
1817
+ - id: ruby.bug-risk.duplicate-hash-keys
1818
+ rulePath: ./rules/ruby/ruby.bug-risk.duplicate-hash-keys.rule.yaml
1819
+ presets:
1820
+ - strict
1821
+ - id: ruby.bug-risk.exception-class-overwritten
1822
+ rulePath: ./rules/ruby/ruby.bug-risk.exception-class-overwritten.rule.yaml
1823
+ presets:
1824
+ - strict
1825
+ - id: ruby.bug-risk.raw-sql-without-squish
1826
+ rulePath: ./rules/ruby/ruby.bug-risk.raw-sql-without-squish.rule.yaml
1827
+ presets:
1828
+ - strict
1829
+ - id: ruby.security.debugger-call
1830
+ rulePath: ./rules/ruby/ruby.security.debugger-call.rule.yaml
1831
+ presets:
1832
+ - strict
1833
+ - security
1834
+ - id: ruby.security.dynamic-code-execution
1835
+ rulePath: ./rules/ruby/ruby.security.dynamic-code-execution.rule.yaml
1836
+ presets:
1837
+ - strict
1838
+ - security
1839
+ - id: ruby.security.insecure-json-load
1840
+ rulePath: ./rules/ruby/ruby.security.insecure-json-load.rule.yaml
1841
+ presets:
1842
+ - strict
1843
+ - security
1844
+ - id: ruby.security.kernel-open
1845
+ rulePath: ./rules/ruby/ruby.security.kernel-open.rule.yaml
1846
+ presets:
1847
+ - strict
1848
+ - security
1849
+ - id: ruby.security.plaintext-password-in-callback
1850
+ rulePath: ./rules/ruby/ruby.security.plaintext-password-in-callback.rule.yaml
1851
+ presets:
1852
+ - strict
1853
+ - security
1266
1854
  - id: ruby.security.rails-csrf-disabled
1267
1855
  rulePath: ./rules/ruby/ruby.security.rails-csrf-disabled.rule.yaml
1268
1856
  presets:
@@ -1273,11 +1861,21 @@ rules:
1273
1861
  presets:
1274
1862
  - strict
1275
1863
  - security
1864
+ - id: ruby.security.rails-link-to-blank-without-noopener
1865
+ rulePath: ./rules/ruby/ruby.security.rails-link-to-blank-without-noopener.rule.yaml
1866
+ presets:
1867
+ - strict
1868
+ - security
1276
1869
  - id: ruby.security.rails-open-redirect
1277
1870
  rulePath: ./rules/ruby/ruby.security.rails-open-redirect.rule.yaml
1278
1871
  presets:
1279
1872
  - strict
1280
1873
  - security
1874
+ - id: ruby.security.rails-output-unsafe
1875
+ rulePath: ./rules/ruby/ruby.security.rails-output-unsafe.rule.yaml
1876
+ presets:
1877
+ - strict
1878
+ - security
1281
1879
  - id: ruby.security.rails-unsafe-html-output
1282
1880
  rulePath: ./rules/ruby/ruby.security.rails-unsafe-html-output.rule.yaml
1283
1881
  presets:
@@ -1323,6 +1921,41 @@ rules:
1323
1921
  presets:
1324
1922
  - strict
1325
1923
  - security
1924
+ - id: rust.security.bind-all-interfaces
1925
+ rulePath: ./rules/rust/rust.security.bind-all-interfaces.rule.yaml
1926
+ presets:
1927
+ - strict
1928
+ - security
1929
+ - id: rust.security.insecure-ssh-host-key
1930
+ rulePath: ./rules/rust/rust.security.insecure-ssh-host-key.rule.yaml
1931
+ presets:
1932
+ - strict
1933
+ - security
1934
+ - id: rust.security.insecure-ssl-protocol
1935
+ rulePath: ./rules/rust/rust.security.insecure-ssl-protocol.rule.yaml
1936
+ presets:
1937
+ - strict
1938
+ - security
1939
+ - id: rust.security.insecure-temp-file
1940
+ rulePath: ./rules/rust/rust.security.insecure-temp-file.rule.yaml
1941
+ presets:
1942
+ - strict
1943
+ - security
1944
+ - id: rust.security.insecure-yaml-load
1945
+ rulePath: ./rules/rust/rust.security.insecure-yaml-load.rule.yaml
1946
+ presets:
1947
+ - strict
1948
+ - security
1949
+ - id: rust.security.jwt-without-verification
1950
+ rulePath: ./rules/rust/rust.security.jwt-without-verification.rule.yaml
1951
+ presets:
1952
+ - strict
1953
+ - security
1954
+ - id: rust.security.panic-in-async-handler
1955
+ rulePath: ./rules/rust/rust.security.panic-in-async-handler.rule.yaml
1956
+ presets:
1957
+ - strict
1958
+ - security
1326
1959
  - id: rust.security.rocket-panic-prone-request-handler
1327
1960
  rulePath: ./rules/rust/rust.security.rocket-panic-prone-request-handler.rule.yaml
1328
1961
  presets:
@@ -1333,6 +1966,11 @@ rules:
1333
1966
  presets:
1334
1967
  - strict
1335
1968
  - security
1969
+ - id: rust.security.shell-command-spawn
1970
+ rulePath: ./rules/rust/rust.security.shell-command-spawn.rule.yaml
1971
+ presets:
1972
+ - strict
1973
+ - security
1336
1974
  - id: rust.security.sqlx-diesel-raw-interpolated-query
1337
1975
  rulePath: ./rules/rust/rust.security.sqlx-diesel-raw-interpolated-query.rule.yaml
1338
1976
  presets:
@@ -1343,11 +1981,31 @@ rules:
1343
1981
  presets:
1344
1982
  - strict
1345
1983
  - security
1984
+ - id: rust.security.tls-missing-min-version
1985
+ rulePath: ./rules/rust/rust.security.tls-missing-min-version.rule.yaml
1986
+ presets:
1987
+ - strict
1988
+ - security
1346
1989
  - id: rust.security.warp-blocking-or-panic-in-async-handler
1347
1990
  rulePath: ./rules/rust/rust.security.warp-blocking-or-panic-in-async-handler.rule.yaml
1348
1991
  presets:
1349
1992
  - strict
1350
1993
  - security
1994
+ - id: rust.security.weak-crypto-import
1995
+ rulePath: ./rules/rust/rust.security.weak-crypto-import.rule.yaml
1996
+ presets:
1997
+ - strict
1998
+ - security
1999
+ - id: rust.security.weak-rsa-key-size
2000
+ rulePath: ./rules/rust/rust.security.weak-rsa-key-size.rule.yaml
2001
+ presets:
2002
+ - strict
2003
+ - security
2004
+ - id: rust.security.weak-tls-cipher
2005
+ rulePath: ./rules/rust/rust.security.weak-tls-cipher.rule.yaml
2006
+ presets:
2007
+ - strict
2008
+ - security
1351
2009
  - id: go.testing.t-skip-without-ticket-reference
1352
2010
  rulePath: ./rules/go/go.testing.t-skip-without-ticket-reference.rule.yaml
1353
2011
  presets:
@@ -1483,11 +2141,31 @@ rules:
1483
2141
  presets:
1484
2142
  - strict
1485
2143
  - security
2144
+ - id: go.security.insecure-rand-seed
2145
+ rulePath: ./rules/go/go.security.insecure-rand-seed.rule.yaml
2146
+ presets:
2147
+ - strict
2148
+ - security
2149
+ - id: go.security.insecure-ssl-protocol
2150
+ rulePath: ./rules/go/go.security.insecure-ssl-protocol.rule.yaml
2151
+ presets:
2152
+ - strict
2153
+ - security
2154
+ - id: go.security.jwt-without-verification
2155
+ rulePath: ./rules/go/go.security.jwt-without-verification.rule.yaml
2156
+ presets:
2157
+ - strict
2158
+ - security
1486
2159
  - id: go.security.net-http-missing-timeouts
1487
2160
  rulePath: ./rules/go/go.security.net-http-missing-timeouts.rule.yaml
1488
2161
  presets:
1489
2162
  - strict
1490
2163
  - security
2164
+ - id: go.security.pprof-exposed
2165
+ rulePath: ./rules/go/go.security.pprof-exposed.rule.yaml
2166
+ presets:
2167
+ - strict
2168
+ - security
1491
2169
  - id: go.security.sensitive-data-egress
1492
2170
  rulePath: ./rules/go/go.security.sensitive-data-egress.rule.yaml
1493
2171
  presets:
@@ -1503,6 +2181,79 @@ rules:
1503
2181
  presets:
1504
2182
  - strict
1505
2183
  - security
2184
+ - id: go.security.bind-all-interfaces
2185
+ rulePath: ./rules/go/go.security.bind-all-interfaces.rule.yaml
2186
+ presets:
2187
+ - strict
2188
+ - security
2189
+ - id: go.security.unsafe-package-import
2190
+ rulePath: ./rules/go/go.security.unsafe-package-import.rule.yaml
2191
+ presets:
2192
+ - strict
2193
+ - security
2194
+ - id: go.security.insecure-ssh-host-key
2195
+ rulePath: ./rules/go/go.security.insecure-ssh-host-key.rule.yaml
2196
+ presets:
2197
+ - strict
2198
+ - security
2199
+ - id: go.security.insecure-temp-file
2200
+ rulePath: ./rules/go/go.security.insecure-temp-file.rule.yaml
2201
+ presets:
2202
+ - strict
2203
+ - security
2204
+ - id: go.security.weak-rsa-key-size
2205
+ rulePath: ./rules/go/go.security.weak-rsa-key-size.rule.yaml
2206
+ presets:
2207
+ - strict
2208
+ - security
2209
+ - id: go.security.weak-crypto-import
2210
+ rulePath: ./rules/go/go.security.weak-crypto-import.rule.yaml
2211
+ presets:
2212
+ - strict
2213
+ - security
2214
+ - id: go.security.tls-missing-min-version
2215
+ rulePath: ./rules/go/go.security.tls-missing-min-version.rule.yaml
2216
+ presets:
2217
+ - strict
2218
+ - security
2219
+ - id: go.security.weak-bcrypt-cost
2220
+ rulePath: ./rules/go/go.security.weak-bcrypt-cost.rule.yaml
2221
+ presets:
2222
+ - strict
2223
+ - security
2224
+ - id: go.security.weak-tls-cipher
2225
+ rulePath: ./rules/go/go.security.weak-tls-cipher.rule.yaml
2226
+ presets:
2227
+ - strict
2228
+ - security
2229
+ - id: go.correctness.defer-close-before-check
2230
+ rulePath: ./rules/go/go.correctness.defer-close-before-check.rule.yaml
2231
+ presets:
2232
+ - strict
2233
+ - id: go.correctness.defer-in-loop
2234
+ rulePath: ./rules/go/go.correctness.defer-in-loop.rule.yaml
2235
+ presets:
2236
+ - strict
2237
+ - id: go.correctness.nil-context-passed
2238
+ rulePath: ./rules/go/go.correctness.nil-context-passed.rule.yaml
2239
+ presets:
2240
+ - strict
2241
+ - id: go.correctness.nil-map-assignment
2242
+ rulePath: ./rules/go/go.correctness.nil-map-assignment.rule.yaml
2243
+ presets:
2244
+ - strict
2245
+ - id: go.correctness.time-tick-leak
2246
+ rulePath: ./rules/go/go.correctness.time-tick-leak.rule.yaml
2247
+ presets:
2248
+ - strict
2249
+ - id: go.correctness.unused-append-result
2250
+ rulePath: ./rules/go/go.correctness.unused-append-result.rule.yaml
2251
+ presets:
2252
+ - strict
2253
+ - id: go.correctness.waitgroup-add-in-goroutine
2254
+ rulePath: ./rules/go/go.correctness.waitgroup-add-in-goroutine.rule.yaml
2255
+ presets:
2256
+ - strict
1506
2257
  - id: php.security.insecure-cors-wildcard-with-credentials
1507
2258
  rulePath: ./rules/php/php.security.insecure-cors-wildcard-with-credentials.rule.yaml
1508
2259
  presets:
@@ -1518,6 +2269,36 @@ rules:
1518
2269
  presets:
1519
2270
  - strict
1520
2271
  - security
2272
+ - id: php.security.debug-function-exposure
2273
+ rulePath: ./rules/php/php.security.debug-function-exposure.rule.yaml
2274
+ presets:
2275
+ - strict
2276
+ - security
2277
+ - id: php.security.insecure-session-id-generation
2278
+ rulePath: ./rules/php/php.security.insecure-session-id-generation.rule.yaml
2279
+ presets:
2280
+ - strict
2281
+ - security
2282
+ - id: php.security.no-dynamic-eval
2283
+ rulePath: ./rules/php/php.security.no-dynamic-eval.rule.yaml
2284
+ presets:
2285
+ - strict
2286
+ - security
2287
+ - id: php.security.unsafe-include-with-user-input
2288
+ rulePath: ./rules/php/php.security.unsafe-include-with-user-input.rule.yaml
2289
+ presets:
2290
+ - strict
2291
+ - security
2292
+ - id: php.security.weak-cipher
2293
+ rulePath: ./rules/php/php.security.weak-cipher.rule.yaml
2294
+ presets:
2295
+ - strict
2296
+ - security
2297
+ - id: php.security.xml-external-entity
2298
+ rulePath: ./rules/php/php.security.xml-external-entity.rule.yaml
2299
+ presets:
2300
+ - strict
2301
+ - security
1521
2302
  - id: php.security.laravel-sensitive-csrf-exclusion
1522
2303
  rulePath: ./rules/php/php.security.laravel-sensitive-csrf-exclusion.rule.yaml
1523
2304
  presets:
@@ -1563,3 +2344,637 @@ rules:
1563
2344
  presets:
1564
2345
  - strict
1565
2346
  - security
2347
+ - id: cfn.correctness.error-processing-rule-on-the-template
2348
+ rulePath: ./rules/cfn/cfn.correctness.error-processing-rule-on-the-template.rule.yaml
2349
+ presets:
2350
+ - strict
2351
+ - id: cfn.correctness.basic-cloudformation-template-configuration
2352
+ rulePath: ./rules/cfn/cfn.correctness.basic-cloudformation-template-configuration.rule.yaml
2353
+ presets:
2354
+ - strict
2355
+ - id: cfn.correctness.template-size-limit
2356
+ rulePath: ./rules/cfn/cfn.correctness.template-size-limit.rule.yaml
2357
+ presets:
2358
+ - strict
2359
+ - id: cfn.correctness.template-description-limit
2360
+ rulePath: ./rules/cfn/cfn.correctness.template-description-limit.rule.yaml
2361
+ presets:
2362
+ - strict
2363
+ - id: cfn.correctness.template-description-can-only-be-a-string
2364
+ rulePath: ./rules/cfn/cfn.correctness.template-description-can-only-be-a-string.rule.yaml
2365
+ presets:
2366
+ - strict
2367
+ - id: cfn.correctness.getatt-validation-of-parameters
2368
+ rulePath: ./rules/cfn/cfn.correctness.getatt-validation-of-parameters.rule.yaml
2369
+ presets:
2370
+ - strict
2371
+ - id: cfn.correctness.findinmap-validation-of-configuration
2372
+ rulePath: ./rules/cfn/cfn.correctness.findinmap-validation-of-configuration.rule.yaml
2373
+ presets:
2374
+ - strict
2375
+ - id: cfn.correctness.check-if-refs-exist
2376
+ rulePath: ./rules/cfn/cfn.correctness.check-if-refs-exist.rule.yaml
2377
+ presets:
2378
+ - strict
2379
+ - id: cfn.correctness.getaz-validation-of-parameters
2380
+ rulePath: ./rules/cfn/cfn.correctness.getaz-validation-of-parameters.rule.yaml
2381
+ presets:
2382
+ - strict
2383
+ - id: cfn.correctness.importvalue-validation-of-parameters
2384
+ rulePath: ./rules/cfn/cfn.correctness.importvalue-validation-of-parameters.rule.yaml
2385
+ presets:
2386
+ - strict
2387
+ - id: cfn.correctness.select-validation-of-parameters
2388
+ rulePath: ./rules/cfn/cfn.correctness.select-validation-of-parameters.rule.yaml
2389
+ presets:
2390
+ - strict
2391
+ - id: cfn.correctness.split-validation-of-parameters
2392
+ rulePath: ./rules/cfn/cfn.correctness.split-validation-of-parameters.rule.yaml
2393
+ presets:
2394
+ - strict
2395
+ - id: cfn.correctness.sub-validation-of-parameters
2396
+ rulePath: ./rules/cfn/cfn.correctness.sub-validation-of-parameters.rule.yaml
2397
+ presets:
2398
+ - strict
2399
+ - id: cfn.correctness.ref-validation-of-value
2400
+ rulePath: ./rules/cfn/cfn.correctness.ref-validation-of-value.rule.yaml
2401
+ presets:
2402
+ - strict
2403
+ - id: cfn.correctness.base64-validation-of-parameters
2404
+ rulePath: ./rules/cfn/cfn.correctness.base64-validation-of-parameters.rule.yaml
2405
+ presets:
2406
+ - strict
2407
+ - id: cfn.correctness.join-validation-of-parameters
2408
+ rulePath: ./rules/cfn/cfn.correctness.join-validation-of-parameters.rule.yaml
2409
+ presets:
2410
+ - strict
2411
+ - id: cfn.correctness.validation-not-function-configuration
2412
+ rulePath: ./rules/cfn/cfn.correctness.validation-not-function-configuration.rule.yaml
2413
+ presets:
2414
+ - strict
2415
+ - id: cfn.correctness.cidr-validation-of-parameters
2416
+ rulePath: ./rules/cfn/cfn.correctness.cidr-validation-of-parameters.rule.yaml
2417
+ presets:
2418
+ - strict
2419
+ - id: cfn.correctness.cannot-reference-resources-in-the-conditions-block-of-the-template
2420
+ rulePath: ./rules/cfn/cfn.correctness.cannot-reference-resources-in-the-conditions-block-of-the-template.rule.yaml
2421
+ presets:
2422
+ - strict
2423
+ - id: cfn.security.check-dynamic-references-secure-strings-are-in-supported-locations
2424
+ rulePath: ./rules/cfn/cfn.security.check-dynamic-references-secure-strings-are-in-supported-locations.rule.yaml
2425
+ presets:
2426
+ - strict
2427
+ - security
2428
+ - id: cfn.correctness.check-fn-if-structure-for-validity
2429
+ rulePath: ./rules/cfn/cfn.correctness.check-fn-if-structure-for-validity.rule.yaml
2430
+ presets:
2431
+ - strict
2432
+ - id: cfn.correctness.sub-is-required-if-a-variable-is-used-in-a-string
2433
+ rulePath: ./rules/cfn/cfn.correctness.sub-is-required-if-a-variable-is-used-in-a-string.rule.yaml
2434
+ presets:
2435
+ - strict
2436
+ - id: cfn.correctness.length-validation-of-parameters
2437
+ rulePath: ./rules/cfn/cfn.correctness.length-validation-of-parameters.rule.yaml
2438
+ presets:
2439
+ - strict
2440
+ - id: cfn.correctness.tojsonstring-validation-of-parameters
2441
+ rulePath: ./rules/cfn/cfn.correctness.tojsonstring-validation-of-parameters.rule.yaml
2442
+ presets:
2443
+ - strict
2444
+ - id: cfn.correctness.validates-foreach-functions
2445
+ rulePath: ./rules/cfn/cfn.correctness.validates-foreach-functions.rule.yaml
2446
+ presets:
2447
+ - strict
2448
+ - id: cfn.correctness.parameters-have-appropriate-properties
2449
+ rulePath: ./rules/cfn/cfn.correctness.parameters-have-appropriate-properties.rule.yaml
2450
+ presets:
2451
+ - strict
2452
+ - id: cfn.correctness.parameters-have-appropriate-type
2453
+ rulePath: ./rules/cfn/cfn.correctness.parameters-have-appropriate-type.rule.yaml
2454
+ presets:
2455
+ - strict
2456
+ - id: cfn.correctness.parameters-have-appropriate-names
2457
+ rulePath: ./rules/cfn/cfn.correctness.parameters-have-appropriate-names.rule.yaml
2458
+ presets:
2459
+ - strict
2460
+ - id: cfn.correctness.parameter-limit-not-exceeded
2461
+ rulePath: ./rules/cfn/cfn.correctness.parameter-limit-not-exceeded.rule.yaml
2462
+ presets:
2463
+ - strict
2464
+ - id: cfn.correctness.parameter-name-limit-not-exceeded
2465
+ rulePath: ./rules/cfn/cfn.correctness.parameter-name-limit-not-exceeded.rule.yaml
2466
+ presets:
2467
+ - strict
2468
+ - id: cfn.correctness.parameter-value-limit-not-exceeded
2469
+ rulePath: ./rules/cfn/cfn.correctness.parameter-value-limit-not-exceeded.rule.yaml
2470
+ presets:
2471
+ - strict
2472
+ - id: cfn.correctness.default-value-cannot-use-refs
2473
+ rulePath: ./rules/cfn/cfn.correctness.default-value-cannot-use-refs.rule.yaml
2474
+ presets:
2475
+ - strict
2476
+ - id: cfn.correctness.default-value-is-within-parameter-constraints
2477
+ rulePath: ./rules/cfn/cfn.correctness.default-value-is-within-parameter-constraints.rule.yaml
2478
+ presets:
2479
+ - strict
2480
+ - id: cfn.correctness.resource-elb-properties
2481
+ rulePath: ./rules/cfn/cfn.correctness.resource-elb-properties.rule.yaml
2482
+ presets:
2483
+ - strict
2484
+ - id: cfn.correctness.check-ec2-ebs-properties
2485
+ rulePath: ./rules/cfn/cfn.correctness.check-ec2-ebs-properties.rule.yaml
2486
+ presets:
2487
+ - strict
2488
+ - id: cfn.correctness.resource-ec2-security-group-ingress-properties
2489
+ rulePath: ./rules/cfn/cfn.correctness.resource-ec2-security-group-ingress-properties.rule.yaml
2490
+ presets:
2491
+ - strict
2492
+ - id: cfn.security.check-if-iam-policies-are-properly-configured
2493
+ rulePath: ./rules/cfn/cfn.security.check-if-iam-policies-are-properly-configured.rule.yaml
2494
+ presets:
2495
+ - strict
2496
+ - security
2497
+ - id: cfn.correctness.check-properties-that-are-mutually-exclusive
2498
+ rulePath: ./rules/cfn/cfn.correctness.check-properties-that-are-mutually-exclusive.rule.yaml
2499
+ presets:
2500
+ - strict
2501
+ - id: cfn.correctness.check-properties-that-are-required-together
2502
+ rulePath: ./rules/cfn/cfn.correctness.check-properties-that-are-required-together.rule.yaml
2503
+ presets:
2504
+ - strict
2505
+ - id: cfn.correctness.check-properties-that-need-at-least-one-of-a-list-of-properties
2506
+ rulePath: ./rules/cfn/cfn.correctness.check-properties-that-need-at-least-one-of-a-list-of-properties.rule.yaml
2507
+ presets:
2508
+ - strict
2509
+ - id: cfn.correctness.check-properties-that-need-only-one-of-a-list-of-properties
2510
+ rulePath: ./rules/cfn/cfn.correctness.check-properties-that-need-only-one-of-a-list-of-properties.rule.yaml
2511
+ presets:
2512
+ - strict
2513
+ - id: cfn.correctness.check-for-subscriptionfilters-have-beyond-2-attachments-to-a-cloudwatch-log-group
2514
+ rulePath: ./rules/cfn/cfn.correctness.check-for-subscriptionfilters-have-beyond-2-attachments-to-a-cloudwatch-log-group.rule.yaml
2515
+ presets:
2516
+ - strict
2517
+ - id: cfn.correctness.snapstart-supports-the-configured-runtime
2518
+ rulePath: ./rules/cfn/cfn.correctness.snapstart-supports-the-configured-runtime.rule.yaml
2519
+ presets:
2520
+ - strict
2521
+ - id: cfn.correctness.check-if-eol-lambda-function-runtimes-are-used
2522
+ rulePath: ./rules/cfn/cfn.correctness.check-if-eol-lambda-function-runtimes-are-used.rule.yaml
2523
+ presets:
2524
+ - strict
2525
+ - id: cfn.correctness.check-state-machine-definition-for-proper-syntax
2526
+ rulePath: ./rules/cfn/cfn.correctness.check-state-machine-definition-for-proper-syntax.rule.yaml
2527
+ presets:
2528
+ - strict
2529
+ - id: cfn.correctness.codepipeline-stages
2530
+ rulePath: ./rules/cfn/cfn.correctness.codepipeline-stages.rule.yaml
2531
+ presets:
2532
+ - strict
2533
+ - id: cfn.correctness.codepipeline-stage-actions
2534
+ rulePath: ./rules/cfn/cfn.correctness.codepipeline-stage-actions.rule.yaml
2535
+ presets:
2536
+ - strict
2537
+ - id: cfn.correctness.resource-schema
2538
+ rulePath: ./rules/cfn/cfn.correctness.resource-schema.rule.yaml
2539
+ presets:
2540
+ - strict
2541
+ - id: cfn.correctness.basic-cloudformation-resource-check
2542
+ rulePath: ./rules/cfn/cfn.correctness.basic-cloudformation-resource-check.rule.yaml
2543
+ presets:
2544
+ - strict
2545
+ - id: cfn.correctness.resource-properties-are-invalid
2546
+ rulePath: ./rules/cfn/cfn.correctness.resource-properties-are-invalid.rule.yaml
2547
+ presets:
2548
+ - strict
2549
+ - id: cfn.correctness.required-resource-properties-are-missing
2550
+ rulePath: ./rules/cfn/cfn.correctness.required-resource-properties-are-missing.rule.yaml
2551
+ presets:
2552
+ - strict
2553
+ - id: cfn.correctness.resource-dependencies-are-not-circular
2554
+ rulePath: ./rules/cfn/cfn.correctness.resource-dependencies-are-not-circular.rule.yaml
2555
+ presets:
2556
+ - strict
2557
+ - id: cfn.correctness.check-dependson-values-for-resources
2558
+ rulePath: ./rules/cfn/cfn.correctness.check-dependson-values-for-resources.rule.yaml
2559
+ presets:
2560
+ - strict
2561
+ - id: cfn.correctness.resources-have-appropriate-names
2562
+ rulePath: ./rules/cfn/cfn.correctness.resources-have-appropriate-names.rule.yaml
2563
+ presets:
2564
+ - strict
2565
+ - id: cfn.correctness.unique-resource-and-parameter-names
2566
+ rulePath: ./rules/cfn/cfn.correctness.unique-resource-and-parameter-names.rule.yaml
2567
+ presets:
2568
+ - strict
2569
+ - id: cfn.correctness.check-values-of-properties-for-valid-refs-and-getatts
2570
+ rulePath: ./rules/cfn/cfn.correctness.check-values-of-properties-for-valid-refs-and-getatts.rule.yaml
2571
+ presets:
2572
+ - strict
2573
+ - id: cfn.correctness.resource-limit-not-exceeded
2574
+ rulePath: ./rules/cfn/cfn.correctness.resource-limit-not-exceeded.rule.yaml
2575
+ presets:
2576
+ - strict
2577
+ - id: cfn.correctness.resource-name-limit-not-exceeded
2578
+ rulePath: ./rules/cfn/cfn.correctness.resource-name-limit-not-exceeded.rule.yaml
2579
+ presets:
2580
+ - strict
2581
+ - id: cfn.correctness.check-resource-properties-values
2582
+ rulePath: ./rules/cfn/cfn.correctness.check-resource-properties-values.rule.yaml
2583
+ presets:
2584
+ - strict
2585
+ - id: cfn.correctness.cloudfront-aliases
2586
+ rulePath: ./rules/cfn/cfn.correctness.cloudfront-aliases.rule.yaml
2587
+ presets:
2588
+ - strict
2589
+ - id: cfn.correctness.check-the-configuration-of-a-resources-updatepolicy
2590
+ rulePath: ./rules/cfn/cfn.correctness.check-the-configuration-of-a-resources-updatepolicy.rule.yaml
2591
+ presets:
2592
+ - strict
2593
+ - id: cfn.correctness.property-is-required-based-on-another-properties-value
2594
+ rulePath: ./rules/cfn/cfn.correctness.property-is-required-based-on-another-properties-value.rule.yaml
2595
+ presets:
2596
+ - strict
2597
+ - id: cfn.correctness.property-is-unwanted-based-on-another-properties-value
2598
+ rulePath: ./rules/cfn/cfn.correctness.property-is-unwanted-based-on-another-properties-value.rule.yaml
2599
+ presets:
2600
+ - strict
2601
+ - id: cfn.correctness.validate-route53-recordsets
2602
+ rulePath: ./rules/cfn/cfn.correctness.validate-route53-recordsets.rule.yaml
2603
+ presets:
2604
+ - strict
2605
+ - id: cfn.correctness.check-events-rule-targets-are-less-than-or-equal-to-5
2606
+ rulePath: ./rules/cfn/cfn.correctness.check-events-rule-targets-are-less-than-or-equal-to-5.rule.yaml
2607
+ presets:
2608
+ - strict
2609
+ - id: cfn.correctness.resource-subnetroutetableassociation-properties
2610
+ rulePath: ./rules/cfn/cfn.correctness.resource-subnetroutetableassociation-properties.rule.yaml
2611
+ presets:
2612
+ - strict
2613
+ - id: cfn.correctness.rds-instance-type-is-compatible-with-the-rds-type
2614
+ rulePath: ./rules/cfn/cfn.correctness.rds-instance-type-is-compatible-with-the-rds-type.rule.yaml
2615
+ presets:
2616
+ - strict
2617
+ - id: cfn.correctness.check-elastic-cache-redis-cluster-settings
2618
+ rulePath: ./rules/cfn/cfn.correctness.check-elastic-cache-redis-cluster-settings.rule.yaml
2619
+ presets:
2620
+ - strict
2621
+ - id: cfn.correctness.validate-aws-event-scheduleexpression-format
2622
+ rulePath: ./rules/cfn/cfn.correctness.validate-aws-event-scheduleexpression-format.rule.yaml
2623
+ presets:
2624
+ - strict
2625
+ - id: cfn.correctness.check-if-properties-have-a-valid-value
2626
+ rulePath: ./rules/cfn/cfn.correctness.check-if-properties-have-a-valid-value.rule.yaml
2627
+ presets:
2628
+ - strict
2629
+ - id: cfn.correctness.check-if-property-values-adhere-to-a-specific-pattern
2630
+ rulePath: ./rules/cfn/cfn.correctness.check-if-property-values-adhere-to-a-specific-pattern.rule.yaml
2631
+ presets:
2632
+ - strict
2633
+ - id: cfn.correctness.check-if-a-list-has-between-min-and-max-number-of-values-specified
2634
+ rulePath: ./rules/cfn/cfn.correctness.check-if-a-list-has-between-min-and-max-number-of-values-specified.rule.yaml
2635
+ presets:
2636
+ - strict
2637
+ - id: cfn.correctness.check-if-a-string-has-between-min-and-max-number-of-values-specified
2638
+ rulePath: ./rules/cfn/cfn.correctness.check-if-a-string-has-between-min-and-max-number-of-values-specified.rule.yaml
2639
+ presets:
2640
+ - strict
2641
+ - id: cfn.correctness.check-if-a-number-is-between-min-and-max
2642
+ rulePath: ./rules/cfn/cfn.correctness.check-if-a-number-is-between-min-and-max.rule.yaml
2643
+ presets:
2644
+ - strict
2645
+ - id: cfn.correctness.check-deletionpolicy-values-for-resources
2646
+ rulePath: ./rules/cfn/cfn.correctness.check-deletionpolicy-values-for-resources.rule.yaml
2647
+ presets:
2648
+ - strict
2649
+ - id: cfn.correctness.check-updatereplacepolicy-values-for-resources
2650
+ rulePath: ./rules/cfn/cfn.correctness.check-updatereplacepolicy-values-for-resources.rule.yaml
2651
+ presets:
2652
+ - strict
2653
+ - id: cfn.correctness.check-if-a-list-has-duplicate-values
2654
+ rulePath: ./rules/cfn/cfn.correctness.check-if-a-list-has-duplicate-values.rule.yaml
2655
+ presets:
2656
+ - strict
2657
+ - id: cfn.correctness.check-if-serverless-resources-have-serverless-transform
2658
+ rulePath: ./rules/cfn/cfn.correctness.check-if-serverless-resources-have-serverless-transform.rule.yaml
2659
+ presets:
2660
+ - strict
2661
+ - id: cfn.correctness.attributedefinitions-keyschemas-mismatch
2662
+ rulePath: ./rules/cfn/cfn.correctness.attributedefinitions-keyschemas-mismatch.rule.yaml
2663
+ presets:
2664
+ - strict
2665
+ - id: cfn.correctness.recordset-hostedzonename-is-a-superdomain-of-name
2666
+ rulePath: ./rules/cfn/cfn.correctness.recordset-hostedzonename-is-a-superdomain-of-name.rule.yaml
2667
+ presets:
2668
+ - strict
2669
+ - id: cfn.correctness.check-at-least-one-essential-container-is-specified
2670
+ rulePath: ./rules/cfn/cfn.correctness.check-at-least-one-essential-container-is-specified.rule.yaml
2671
+ presets:
2672
+ - strict
2673
+ - id: cfn.correctness.validate-parameters-for-in-a-nested-stack
2674
+ rulePath: ./rules/cfn/cfn.correctness.validate-parameters-for-in-a-nested-stack.rule.yaml
2675
+ presets:
2676
+ - strict
2677
+ - id: cfn.correctness.check-fargate-service-scheduling-strategy
2678
+ rulePath: ./rules/cfn/cfn.correctness.check-fargate-service-scheduling-strategy.rule.yaml
2679
+ presets:
2680
+ - strict
2681
+ - id: cfn.correctness.validate-accesscontrol-are-set-with-ownershipcontrols
2682
+ rulePath: ./rules/cfn/cfn.correctness.validate-accesscontrol-are-set-with-ownershipcontrols.rule.yaml
2683
+ presets:
2684
+ - strict
2685
+ - id: cfn.correctness.check-if-refing-to-a-iam-resource-with-path-set
2686
+ rulePath: ./rules/cfn/cfn.correctness.check-if-refing-to-a-iam-resource-with-path-set.rule.yaml
2687
+ presets:
2688
+ - strict
2689
+ - id: cfn.correctness.check-if-a-json-object-is-within-size-limits
2690
+ rulePath: ./rules/cfn/cfn.correctness.check-if-a-json-object-is-within-size-limits.rule.yaml
2691
+ presets:
2692
+ - strict
2693
+ - id: cfn.correctness.validationdomain-is-superdomain-of-domainname
2694
+ rulePath: ./rules/cfn/cfn.correctness.validationdomain-is-superdomain-of-domainname.rule.yaml
2695
+ presets:
2696
+ - strict
2697
+ - id: cfn.correctness.check-minimum-90-period-is-met-between-backupplan-cold-and-delete
2698
+ rulePath: ./rules/cfn/cfn.correctness.check-minimum-90-period-is-met-between-backupplan-cold-and-delete.rule.yaml
2699
+ presets:
2700
+ - strict
2701
+ - id: cfn.correctness.metadata-interface-have-appropriate-properties
2702
+ rulePath: ./rules/cfn/cfn.correctness.metadata-interface-have-appropriate-properties.rule.yaml
2703
+ presets:
2704
+ - strict
2705
+ - id: cfn.correctness.validate-the-configuration-of-the-metadata-section
2706
+ rulePath: ./rules/cfn/cfn.correctness.validate-the-configuration-of-the-metadata-section.rule.yaml
2707
+ presets:
2708
+ - strict
2709
+ - id: cfn.correctness.check-that-modules-resources-are-valid
2710
+ rulePath: ./rules/cfn/cfn.correctness.check-that-modules-resources-are-valid.rule.yaml
2711
+ presets:
2712
+ - strict
2713
+ - id: cfn.correctness.outputs-have-appropriate-properties
2714
+ rulePath: ./rules/cfn/cfn.correctness.outputs-have-appropriate-properties.rule.yaml
2715
+ presets:
2716
+ - strict
2717
+ - id: cfn.correctness.outputs-have-required-properties
2718
+ rulePath: ./rules/cfn/cfn.correctness.outputs-have-required-properties.rule.yaml
2719
+ presets:
2720
+ - strict
2721
+ - id: cfn.correctness.outputs-have-values-of-strings
2722
+ rulePath: ./rules/cfn/cfn.correctness.outputs-have-values-of-strings.rule.yaml
2723
+ presets:
2724
+ - strict
2725
+ - id: cfn.correctness.outputs-have-appropriate-names
2726
+ rulePath: ./rules/cfn/cfn.correctness.outputs-have-appropriate-names.rule.yaml
2727
+ presets:
2728
+ - strict
2729
+ - id: cfn.correctness.outputs-descriptions-can-only-be-strings
2730
+ rulePath: ./rules/cfn/cfn.correctness.outputs-descriptions-can-only-be-strings.rule.yaml
2731
+ presets:
2732
+ - strict
2733
+ - id: cfn.correctness.output-limit-not-exceeded
2734
+ rulePath: ./rules/cfn/cfn.correctness.output-limit-not-exceeded.rule.yaml
2735
+ presets:
2736
+ - strict
2737
+ - id: cfn.correctness.output-name-limit-not-exceeded
2738
+ rulePath: ./rules/cfn/cfn.correctness.output-name-limit-not-exceeded.rule.yaml
2739
+ presets:
2740
+ - strict
2741
+ - id: cfn.correctness.output-description-limit-not-exceeded
2742
+ rulePath: ./rules/cfn/cfn.correctness.output-description-limit-not-exceeded.rule.yaml
2743
+ presets:
2744
+ - strict
2745
+ - id: cfn.correctness.mappings-are-appropriately-configured
2746
+ rulePath: ./rules/cfn/cfn.correctness.mappings-are-appropriately-configured.rule.yaml
2747
+ presets:
2748
+ - strict
2749
+ - id: cfn.correctness.mappings-have-appropriate-names
2750
+ rulePath: ./rules/cfn/cfn.correctness.mappings-have-appropriate-names.rule.yaml
2751
+ presets:
2752
+ - strict
2753
+ - id: cfn.correctness.mapping-keys-are-strings-and-alphanumeric
2754
+ rulePath: ./rules/cfn/cfn.correctness.mapping-keys-are-strings-and-alphanumeric.rule.yaml
2755
+ presets:
2756
+ - strict
2757
+ - id: cfn.correctness.mapping-limit-not-exceeded
2758
+ rulePath: ./rules/cfn/cfn.correctness.mapping-limit-not-exceeded.rule.yaml
2759
+ presets:
2760
+ - strict
2761
+ - id: cfn.correctness.mapping-name-limit-not-exceeded
2762
+ rulePath: ./rules/cfn/cfn.correctness.mapping-name-limit-not-exceeded.rule.yaml
2763
+ presets:
2764
+ - strict
2765
+ - id: cfn.correctness.mapping-attribute-limit-not-exceeded
2766
+ rulePath: ./rules/cfn/cfn.correctness.mapping-attribute-limit-not-exceeded.rule.yaml
2767
+ presets:
2768
+ - strict
2769
+ - id: cfn.correctness.conditions-have-appropriate-properties
2770
+ rulePath: ./rules/cfn/cfn.correctness.conditions-have-appropriate-properties.rule.yaml
2771
+ presets:
2772
+ - strict
2773
+ - id: cfn.correctness.check-if-the-referenced-conditions-are-defined
2774
+ rulePath: ./rules/cfn/cfn.correctness.check-if-the-referenced-conditions-are-defined.rule.yaml
2775
+ presets:
2776
+ - strict
2777
+ - id: cfn.correctness.check-fn-equals-structure-for-validity
2778
+ rulePath: ./rules/cfn/cfn.correctness.check-fn-equals-structure-for-validity.rule.yaml
2779
+ presets:
2780
+ - strict
2781
+ - id: cfn.correctness.check-fn-and-structure-for-validity
2782
+ rulePath: ./rules/cfn/cfn.correctness.check-fn-and-structure-for-validity.rule.yaml
2783
+ presets:
2784
+ - strict
2785
+ - id: cfn.correctness.check-fn-not-structure-for-validity
2786
+ rulePath: ./rules/cfn/cfn.correctness.check-fn-not-structure-for-validity.rule.yaml
2787
+ presets:
2788
+ - strict
2789
+ - id: cfn.correctness.check-fn-or-structure-for-validity
2790
+ rulePath: ./rules/cfn/cfn.correctness.check-fn-or-structure-for-validity.rule.yaml
2791
+ presets:
2792
+ - strict
2793
+ - id: cfn.maintainability.template-size-limit-i1002
2794
+ rulePath: ./rules/cfn/cfn.maintainability.template-size-limit-i1002.rule.yaml
2795
+ presets:
2796
+ - strict
2797
+ - id: cfn.maintainability.template-description-limit-i1003
2798
+ rulePath: ./rules/cfn/cfn.maintainability.template-description-limit-i1003.rule.yaml
2799
+ presets:
2800
+ - strict
2801
+ - id: cfn.maintainability.use-sub-instead-of-join
2802
+ rulePath: ./rules/cfn/cfn.maintainability.use-sub-instead-of-join.rule.yaml
2803
+ presets:
2804
+ - strict
2805
+ - id: cfn.maintainability.parameter-limit
2806
+ rulePath: ./rules/cfn/cfn.maintainability.parameter-limit.rule.yaml
2807
+ presets:
2808
+ - strict
2809
+ - id: cfn.maintainability.parameter-name-limit
2810
+ rulePath: ./rules/cfn/cfn.maintainability.parameter-name-limit.rule.yaml
2811
+ presets:
2812
+ - strict
2813
+ - id: cfn.maintainability.parameter-value-limit
2814
+ rulePath: ./rules/cfn/cfn.maintainability.parameter-value-limit.rule.yaml
2815
+ presets:
2816
+ - strict
2817
+ - id: cfn.maintainability.validate-that-snapstart-is-configured-for-java11-runtimes
2818
+ rulePath: ./rules/cfn/cfn.maintainability.validate-that-snapstart-is-configured-for-java11-runtimes.rule.yaml
2819
+ presets:
2820
+ - strict
2821
+ - id: cfn.maintainability.resource-limit
2822
+ rulePath: ./rules/cfn/cfn.maintainability.resource-limit.rule.yaml
2823
+ presets:
2824
+ - strict
2825
+ - id: cfn.maintainability.check-stateful-resources-have-a-set-updatereplacepolicy-deletionpolicy
2826
+ rulePath: ./rules/cfn/cfn.maintainability.check-stateful-resources-have-a-set-updatereplacepolicy-deletionpolicy.rule.yaml
2827
+ presets:
2828
+ - strict
2829
+ - id: cfn.maintainability.resource-name-limit
2830
+ rulePath: ./rules/cfn/cfn.maintainability.resource-name-limit.rule.yaml
2831
+ presets:
2832
+ - strict
2833
+ - id: cfn.maintainability.check-resources-with-auto-expiring-content-have-explicit-retention-period
2834
+ rulePath: ./rules/cfn/cfn.maintainability.check-resources-with-auto-expiring-content-have-explicit-retention-period.rule.yaml
2835
+ presets:
2836
+ - strict
2837
+ - id: cfn.maintainability.check-if-a-list-that-allows-duplicates-has-any-duplicates
2838
+ rulePath: ./rules/cfn/cfn.maintainability.check-if-a-list-that-allows-duplicates-has-any-duplicates.rule.yaml
2839
+ presets:
2840
+ - strict
2841
+ - id: cfn.maintainability.arns-should-use-correctly-placed-pseudo-parameters
2842
+ rulePath: ./rules/cfn/cfn.maintainability.arns-should-use-correctly-placed-pseudo-parameters.rule.yaml
2843
+ presets:
2844
+ - strict
2845
+ - id: cfn.maintainability.checks-for-legacy-instance-type-generations
2846
+ rulePath: ./rules/cfn/cfn.maintainability.checks-for-legacy-instance-type-generations.rule.yaml
2847
+ presets:
2848
+ - strict
2849
+ - id: cfn.maintainability.output-limit
2850
+ rulePath: ./rules/cfn/cfn.maintainability.output-limit.rule.yaml
2851
+ presets:
2852
+ - strict
2853
+ - id: cfn.maintainability.output-name-limit
2854
+ rulePath: ./rules/cfn/cfn.maintainability.output-name-limit.rule.yaml
2855
+ presets:
2856
+ - strict
2857
+ - id: cfn.maintainability.output-description-limit
2858
+ rulePath: ./rules/cfn/cfn.maintainability.output-description-limit.rule.yaml
2859
+ presets:
2860
+ - strict
2861
+ - id: cfn.maintainability.mapping-limit
2862
+ rulePath: ./rules/cfn/cfn.maintainability.mapping-limit.rule.yaml
2863
+ presets:
2864
+ - strict
2865
+ - id: cfn.maintainability.mapping-name-limit
2866
+ rulePath: ./rules/cfn/cfn.maintainability.mapping-name-limit.rule.yaml
2867
+ presets:
2868
+ - strict
2869
+ - id: cfn.maintainability.mapping-attribute-limit
2870
+ rulePath: ./rules/cfn/cfn.maintainability.mapping-attribute-limit.rule.yaml
2871
+ presets:
2872
+ - strict
2873
+ - id: cfn.maintainability.ref-getatt-to-resource-that-is-available-when-conditions-are-applied
2874
+ rulePath: ./rules/cfn/cfn.maintainability.ref-getatt-to-resource-that-is-available-when-conditions-are-applied.rule.yaml
2875
+ presets:
2876
+ - strict
2877
+ - id: cfn.maintainability.findinmap-keys-exist-in-the-map
2878
+ rulePath: ./rules/cfn/cfn.maintainability.findinmap-keys-exist-in-the-map.rule.yaml
2879
+ presets:
2880
+ - strict
2881
+ - id: cfn.maintainability.sub-validation-of-parameters-w1019
2882
+ rulePath: ./rules/cfn/cfn.maintainability.sub-validation-of-parameters-w1019.rule.yaml
2883
+ presets:
2884
+ - strict
2885
+ - id: cfn.maintainability.sub-isn-t-needed-if-it-doesn-t-have-a-variable-defined
2886
+ rulePath: ./rules/cfn/cfn.maintainability.sub-isn-t-needed-if-it-doesn-t-have-a-variable-defined.rule.yaml
2887
+ presets:
2888
+ - strict
2889
+ - id: cfn.maintainability.check-if-parameters-are-used
2890
+ rulePath: ./rules/cfn/cfn.maintainability.check-if-parameters-are-used.rule.yaml
2891
+ presets:
2892
+ - strict
2893
+ - id: cfn.maintainability.check-if-parameters-have-a-valid-value
2894
+ rulePath: ./rules/cfn/cfn.maintainability.check-if-parameters-have-a-valid-value.rule.yaml
2895
+ presets:
2896
+ - strict
2897
+ - id: cfn.maintainability.check-if-parameters-have-a-valid-value-based-on-an-allowed-pattern
2898
+ rulePath: ./rules/cfn/cfn.maintainability.check-if-parameters-have-a-valid-value-based-on-an-allowed-pattern.rule.yaml
2899
+ presets:
2900
+ - strict
2901
+ - id: cfn.security.check-if-password-properties-are-correctly-configured
2902
+ rulePath: ./rules/cfn/cfn.security.check-if-password-properties-are-correctly-configured.rule.yaml
2903
+ presets:
2904
+ - strict
2905
+ - security
2906
+ - id: cfn.maintainability.check-if-imageid-parameters-have-the-correct-type
2907
+ rulePath: ./rules/cfn/cfn.maintainability.check-if-imageid-parameters-have-the-correct-type.rule.yaml
2908
+ presets:
2909
+ - strict
2910
+ - id: cfn.maintainability.parameter-memory-size-attributes-should-have-max-and-min
2911
+ rulePath: ./rules/cfn/cfn.maintainability.parameter-memory-size-attributes-should-have-max-and-min.rule.yaml
2912
+ presets:
2913
+ - strict
2914
+ - id: cfn.maintainability.check-iam-resource-policies-syntax
2915
+ rulePath: ./rules/cfn/cfn.maintainability.check-iam-resource-policies-syntax.rule.yaml
2916
+ presets:
2917
+ - strict
2918
+ - id: cfn.maintainability.validate-that-snapstart-is-properly-configured
2919
+ rulePath: ./rules/cfn/cfn.maintainability.validate-that-snapstart-is-properly-configured.rule.yaml
2920
+ presets:
2921
+ - strict
2922
+ - id: cfn.maintainability.check-if-eol-lambda-function-runtimes-are-used-w2531
2923
+ rulePath: ./rules/cfn/cfn.maintainability.check-if-eol-lambda-function-runtimes-are-used-w2531.rule.yaml
2924
+ presets:
2925
+ - strict
2926
+ - id: cfn.maintainability.check-required-properties-for-lambda-if-the-deployment-package-is-a-zip-file
2927
+ rulePath: ./rules/cfn/cfn.maintainability.check-required-properties-for-lambda-if-the-deployment-package-is-a-zip-file.rule.yaml
2928
+ presets:
2929
+ - strict
2930
+ - id: cfn.maintainability.warn-when-properties-are-configured-to-only-work-with-the-package-command
2931
+ rulePath: ./rules/cfn/cfn.maintainability.warn-when-properties-are-configured-to-only-work-with-the-package-command.rule.yaml
2932
+ presets:
2933
+ - strict
2934
+ - id: cfn.maintainability.check-obsolete-dependson-configuration-for-resources
2935
+ rulePath: ./rules/cfn/cfn.maintainability.check-obsolete-dependson-configuration-for-resources.rule.yaml
2936
+ presets:
2937
+ - strict
2938
+ - id: cfn.maintainability.availability-zone-parameters-should-not-be-hardcoded
2939
+ rulePath: ./rules/cfn/cfn.maintainability.availability-zone-parameters-should-not-be-hardcoded.rule.yaml
2940
+ presets:
2941
+ - strict
2942
+ - id: cfn.maintainability.check-resources-with-updatereplacepolicy-deletionpolicy-have-both
2943
+ rulePath: ./rules/cfn/cfn.maintainability.check-resources-with-updatereplacepolicy-deletionpolicy-have-both.rule.yaml
2944
+ presets:
2945
+ - strict
2946
+ - id: cfn.security.check-iam-permission-configuration
2947
+ rulePath: ./rules/cfn/cfn.security.check-iam-permission-configuration.rule.yaml
2948
+ presets:
2949
+ - strict
2950
+ - security
2951
+ - id: cfn.security.controlling-access-to-an-s3-bucket-should-be-done-with-bucket-policies
2952
+ rulePath: ./rules/cfn/cfn.security.controlling-access-to-an-s3-bucket-should-be-done-with-bucket-policies.rule.yaml
2953
+ presets:
2954
+ - strict
2955
+ - security
2956
+ - id: cfn.maintainability.metadata-interface-parameters-exist
2957
+ rulePath: ./rules/cfn/cfn.maintainability.metadata-interface-parameters-exist.rule.yaml
2958
+ presets:
2959
+ - strict
2960
+ - id: cfn.security.check-for-noecho-references
2961
+ rulePath: ./rules/cfn/cfn.security.check-for-noecho-references.rule.yaml
2962
+ presets:
2963
+ - strict
2964
+ - security
2965
+ - id: cfn.maintainability.check-outputs-using-importvalue
2966
+ rulePath: ./rules/cfn/cfn.maintainability.check-outputs-using-importvalue.rule.yaml
2967
+ presets:
2968
+ - strict
2969
+ - id: cfn.maintainability.check-if-mappings-are-used
2970
+ rulePath: ./rules/cfn/cfn.maintainability.check-if-mappings-are-used.rule.yaml
2971
+ presets:
2972
+ - strict
2973
+ - id: cfn.maintainability.check-if-conditions-are-used
2974
+ rulePath: ./rules/cfn/cfn.maintainability.check-if-conditions-are-used.rule.yaml
2975
+ presets:
2976
+ - strict
2977
+ - id: cfn.maintainability.fn-equals-will-always-return-true-or-false
2978
+ rulePath: ./rules/cfn/cfn.maintainability.fn-equals-will-always-return-true-or-false.rule.yaml
2979
+ presets:
2980
+ - strict