@critiq/rules 0.1.0 → 0.3.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +3 -2
- package/catalog.yaml +1415 -0
- package/package.json +1 -1
- package/rules/cfn/cfn.correctness.attributedefinitions-keyschemas-mismatch.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.base64-validation-of-parameters.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.basic-cloudformation-resource-check.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.basic-cloudformation-template-configuration.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.cannot-reference-resources-in-the-conditions-block-of-the-template.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.check-at-least-one-essential-container-is-specified.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.check-deletionpolicy-values-for-resources.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.check-dependson-values-for-resources.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.check-ec2-ebs-properties.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.check-elastic-cache-redis-cluster-settings.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.check-events-rule-targets-are-less-than-or-equal-to-5.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.check-fargate-service-scheduling-strategy.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.check-fn-and-structure-for-validity.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.check-fn-equals-structure-for-validity.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.check-fn-if-structure-for-validity.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.check-fn-not-structure-for-validity.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.check-fn-or-structure-for-validity.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.check-for-subscriptionfilters-have-beyond-2-attachments-to-a-cloudwatch-log-group.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.check-if-a-json-object-is-within-size-limits.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.check-if-a-list-has-between-min-and-max-number-of-values-specified.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.check-if-a-list-has-duplicate-values.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.check-if-a-number-is-between-min-and-max.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.check-if-a-string-has-between-min-and-max-number-of-values-specified.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.check-if-eol-lambda-function-runtimes-are-used.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.check-if-properties-have-a-valid-value.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.check-if-property-values-adhere-to-a-specific-pattern.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.check-if-refing-to-a-iam-resource-with-path-set.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.check-if-refs-exist.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.check-if-serverless-resources-have-serverless-transform.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.check-if-the-referenced-conditions-are-defined.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.check-minimum-90-period-is-met-between-backupplan-cold-and-delete.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.check-properties-that-are-mutually-exclusive.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.check-properties-that-are-required-together.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.check-properties-that-need-at-least-one-of-a-list-of-properties.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.check-properties-that-need-only-one-of-a-list-of-properties.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.check-resource-properties-values.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.check-state-machine-definition-for-proper-syntax.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.check-that-modules-resources-are-valid.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.check-the-configuration-of-a-resources-updatepolicy.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.check-updatereplacepolicy-values-for-resources.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.check-values-of-properties-for-valid-refs-and-getatts.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.cidr-validation-of-parameters.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.cloudfront-aliases.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.codepipeline-stage-actions.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.codepipeline-stages.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.conditions-have-appropriate-properties.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.default-value-cannot-use-refs.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.default-value-is-within-parameter-constraints.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.error-processing-rule-on-the-template.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.findinmap-validation-of-configuration.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.getatt-validation-of-parameters.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.getaz-validation-of-parameters.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.importvalue-validation-of-parameters.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.join-validation-of-parameters.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.length-validation-of-parameters.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.mapping-attribute-limit-not-exceeded.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.mapping-keys-are-strings-and-alphanumeric.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.mapping-limit-not-exceeded.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.mapping-name-limit-not-exceeded.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.mappings-are-appropriately-configured.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.mappings-have-appropriate-names.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.metadata-interface-have-appropriate-properties.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.output-description-limit-not-exceeded.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.output-limit-not-exceeded.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.output-name-limit-not-exceeded.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.outputs-descriptions-can-only-be-strings.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.outputs-have-appropriate-names.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.outputs-have-appropriate-properties.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.outputs-have-required-properties.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.outputs-have-values-of-strings.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.parameter-limit-not-exceeded.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.parameter-name-limit-not-exceeded.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.parameter-value-limit-not-exceeded.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.parameters-have-appropriate-names.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.parameters-have-appropriate-properties.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.parameters-have-appropriate-type.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.property-is-required-based-on-another-properties-value.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.property-is-unwanted-based-on-another-properties-value.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.rds-instance-type-is-compatible-with-the-rds-type.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.recordset-hostedzonename-is-a-superdomain-of-name.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.ref-validation-of-value.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.required-resource-properties-are-missing.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.resource-dependencies-are-not-circular.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.resource-ec2-security-group-ingress-properties.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.resource-elb-properties.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.resource-limit-not-exceeded.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.resource-name-limit-not-exceeded.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.resource-properties-are-invalid.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.resource-schema.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.resource-subnetroutetableassociation-properties.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.resources-have-appropriate-names.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.select-validation-of-parameters.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.snapstart-supports-the-configured-runtime.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.split-validation-of-parameters.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.sub-is-required-if-a-variable-is-used-in-a-string.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.sub-validation-of-parameters.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.template-description-can-only-be-a-string.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.template-description-limit.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.template-size-limit.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.tojsonstring-validation-of-parameters.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.unique-resource-and-parameter-names.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.validate-accesscontrol-are-set-with-ownershipcontrols.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.validate-aws-event-scheduleexpression-format.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.validate-parameters-for-in-a-nested-stack.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.validate-route53-recordsets.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.validate-the-configuration-of-the-metadata-section.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.validates-foreach-functions.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.validation-not-function-configuration.rule.yaml +49 -0
- package/rules/cfn/cfn.correctness.validationdomain-is-superdomain-of-domainname.rule.yaml +49 -0
- package/rules/cfn/cfn.maintainability.arns-should-use-correctly-placed-pseudo-parameters.rule.yaml +49 -0
- package/rules/cfn/cfn.maintainability.availability-zone-parameters-should-not-be-hardcoded.rule.yaml +49 -0
- package/rules/cfn/cfn.maintainability.check-iam-resource-policies-syntax.rule.yaml +49 -0
- package/rules/cfn/cfn.maintainability.check-if-a-list-that-allows-duplicates-has-any-duplicates.rule.yaml +49 -0
- package/rules/cfn/cfn.maintainability.check-if-conditions-are-used.rule.yaml +49 -0
- package/rules/cfn/cfn.maintainability.check-if-eol-lambda-function-runtimes-are-used-w2531.rule.yaml +49 -0
- package/rules/cfn/cfn.maintainability.check-if-imageid-parameters-have-the-correct-type.rule.yaml +49 -0
- package/rules/cfn/cfn.maintainability.check-if-mappings-are-used.rule.yaml +49 -0
- package/rules/cfn/cfn.maintainability.check-if-parameters-are-used.rule.yaml +49 -0
- package/rules/cfn/cfn.maintainability.check-if-parameters-have-a-valid-value-based-on-an-allowed-pattern.rule.yaml +49 -0
- package/rules/cfn/cfn.maintainability.check-if-parameters-have-a-valid-value.rule.yaml +49 -0
- package/rules/cfn/cfn.maintainability.check-obsolete-dependson-configuration-for-resources.rule.yaml +49 -0
- package/rules/cfn/cfn.maintainability.check-outputs-using-importvalue.rule.yaml +49 -0
- package/rules/cfn/cfn.maintainability.check-required-properties-for-lambda-if-the-deployment-package-is-a-zip-file.rule.yaml +49 -0
- package/rules/cfn/cfn.maintainability.check-resources-with-auto-expiring-content-have-explicit-retention-period.rule.yaml +49 -0
- package/rules/cfn/cfn.maintainability.check-resources-with-updatereplacepolicy-deletionpolicy-have-both.rule.yaml +49 -0
- package/rules/cfn/cfn.maintainability.check-stateful-resources-have-a-set-updatereplacepolicy-deletionpolicy.rule.yaml +49 -0
- package/rules/cfn/cfn.maintainability.checks-for-legacy-instance-type-generations.rule.yaml +49 -0
- package/rules/cfn/cfn.maintainability.findinmap-keys-exist-in-the-map.rule.yaml +49 -0
- package/rules/cfn/cfn.maintainability.fn-equals-will-always-return-true-or-false.rule.yaml +49 -0
- package/rules/cfn/cfn.maintainability.mapping-attribute-limit.rule.yaml +49 -0
- package/rules/cfn/cfn.maintainability.mapping-limit.rule.yaml +49 -0
- package/rules/cfn/cfn.maintainability.mapping-name-limit.rule.yaml +49 -0
- package/rules/cfn/cfn.maintainability.metadata-interface-parameters-exist.rule.yaml +49 -0
- package/rules/cfn/cfn.maintainability.output-description-limit.rule.yaml +49 -0
- package/rules/cfn/cfn.maintainability.output-limit.rule.yaml +49 -0
- package/rules/cfn/cfn.maintainability.output-name-limit.rule.yaml +49 -0
- package/rules/cfn/cfn.maintainability.parameter-limit.rule.yaml +49 -0
- package/rules/cfn/cfn.maintainability.parameter-memory-size-attributes-should-have-max-and-min.rule.yaml +49 -0
- package/rules/cfn/cfn.maintainability.parameter-name-limit.rule.yaml +49 -0
- package/rules/cfn/cfn.maintainability.parameter-value-limit.rule.yaml +49 -0
- package/rules/cfn/cfn.maintainability.ref-getatt-to-resource-that-is-available-when-conditions-are-applied.rule.yaml +49 -0
- package/rules/cfn/cfn.maintainability.resource-limit.rule.yaml +49 -0
- package/rules/cfn/cfn.maintainability.resource-name-limit.rule.yaml +49 -0
- package/rules/cfn/cfn.maintainability.sub-isn-t-needed-if-it-doesn-t-have-a-variable-defined.rule.yaml +49 -0
- package/rules/cfn/cfn.maintainability.sub-validation-of-parameters-w1019.rule.yaml +49 -0
- package/rules/cfn/cfn.maintainability.template-description-limit-i1003.rule.yaml +49 -0
- package/rules/cfn/cfn.maintainability.template-size-limit-i1002.rule.yaml +49 -0
- package/rules/cfn/cfn.maintainability.use-sub-instead-of-join.rule.yaml +49 -0
- package/rules/cfn/cfn.maintainability.validate-that-snapstart-is-configured-for-java11-runtimes.rule.yaml +49 -0
- package/rules/cfn/cfn.maintainability.validate-that-snapstart-is-properly-configured.rule.yaml +49 -0
- package/rules/cfn/cfn.maintainability.warn-when-properties-are-configured-to-only-work-with-the-package-command.rule.yaml +49 -0
- package/rules/cfn/cfn.security.check-dynamic-references-secure-strings-are-in-supported-locations.rule.yaml +53 -0
- package/rules/cfn/cfn.security.check-for-noecho-references.rule.yaml +53 -0
- package/rules/cfn/cfn.security.check-iam-permission-configuration.rule.yaml +53 -0
- package/rules/cfn/cfn.security.check-if-iam-policies-are-properly-configured.rule.yaml +53 -0
- package/rules/cfn/cfn.security.check-if-password-properties-are-correctly-configured.rule.yaml +53 -0
- package/rules/cfn/cfn.security.controlling-access-to-an-s3-bucket-should-be-done-with-bucket-policies.rule.yaml +53 -0
- package/rules/go/go.correctness.defer-close-before-check.rule.yaml +44 -0
- package/rules/go/go.correctness.defer-in-loop.rule.yaml +47 -0
- package/rules/go/go.correctness.nil-context-passed.rule.yaml +43 -0
- package/rules/go/go.correctness.nil-map-assignment.rule.yaml +42 -0
- package/rules/go/go.correctness.time-tick-leak.rule.yaml +44 -0
- package/rules/go/go.correctness.unused-append-result.rule.yaml +43 -0
- package/rules/go/go.correctness.waitgroup-add-in-goroutine.rule.yaml +45 -0
- package/rules/go/go.security.bind-all-interfaces.rule.yaml +57 -0
- package/rules/go/go.security.echo-sensitive-binding-without-validation.rule.yaml +10 -0
- package/rules/go/go.security.echo-unsafe-multipart-upload.rule.yaml +10 -0
- package/rules/go/go.security.fiber-sensitive-binding-without-validation.rule.yaml +10 -0
- package/rules/go/go.security.fiber-unsafe-multipart-upload.rule.yaml +10 -0
- package/rules/go/go.security.gin-sensitive-binding-without-validation.rule.yaml +10 -0
- package/rules/go/go.security.gin-trust-all-proxies.rule.yaml +10 -0
- package/rules/go/go.security.gin-wildcard-cors-with-credentials.rule.yaml +10 -0
- package/rules/go/go.security.insecure-rand-seed.rule.yaml +55 -0
- package/rules/go/go.security.insecure-ssh-host-key.rule.yaml +57 -0
- package/rules/go/go.security.insecure-ssl-protocol.rule.yaml +56 -0
- package/rules/go/go.security.insecure-temp-file.rule.yaml +57 -0
- package/rules/go/go.security.jwt-without-verification.rule.yaml +56 -0
- package/rules/go/go.security.net-http-missing-timeouts.rule.yaml +10 -0
- package/rules/go/go.security.pprof-exposed.rule.yaml +56 -0
- package/rules/go/go.security.sensitive-data-egress.rule.yaml +10 -0
- package/rules/go/go.security.tar-path-traversal.rule.yaml +10 -0
- package/rules/go/go.security.template-unescaped-request-value.rule.yaml +10 -0
- package/rules/go/go.security.tls-missing-min-version.rule.yaml +55 -0
- package/rules/go/go.security.unsafe-package-import.rule.yaml +55 -0
- package/rules/go/go.security.weak-bcrypt-cost.rule.yaml +56 -0
- package/rules/go/go.security.weak-crypto-import.rule.yaml +57 -0
- package/rules/go/go.security.weak-rsa-key-size.rule.yaml +57 -0
- package/rules/go/go.security.weak-tls-cipher.rule.yaml +56 -0
- package/rules/java/java.correctness.catch-null-pointer.rule.yaml +40 -0
- package/rules/java/java.correctness.empty-catch.rule.yaml +40 -0
- package/rules/java/java.correctness.equals-on-array.rule.yaml +40 -0
- package/rules/java/java.correctness.return-in-finally.rule.yaml +40 -0
- package/rules/java/java.correctness.sync-on-string-literal.rule.yaml +40 -0
- package/rules/java/java.correctness.unsafe-optional-get.rule.yaml +40 -0
- package/rules/java/java.security.android-screenshot-exposure.rule.yaml +13 -0
- package/rules/java/java.security.android-world-readable-mode.rule.yaml +13 -0
- package/rules/java/java.security.hibernate-sql-concatenation.rule.yaml +62 -0
- package/rules/java/java.security.insecure-cipher-mode.rule.yaml +52 -0
- package/rules/java/java.security.insecure-network-protocol.rule.yaml +52 -0
- package/rules/java/java.security.insecure-ssl-context.rule.yaml +52 -0
- package/rules/java/java.security.jpa-concatenated-query.rule.yaml +13 -0
- package/rules/java/java.security.jwt-without-verification.rule.yaml +53 -0
- package/rules/java/java.security.null-cipher.rule.yaml +52 -0
- package/rules/java/java.security.permissive-cors.rule.yaml +53 -0
- package/rules/java/java.security.predictable-securerandom.rule.yaml +59 -0
- package/rules/java/java.security.reflected-output-from-request.rule.yaml +10 -0
- package/rules/java/java.security.servlet-insecure-cookie.rule.yaml +13 -0
- package/rules/java/java.security.shell-runtime-exec.rule.yaml +58 -0
- package/rules/java/java.security.spring-actuator-health-details-always.rule.yaml +13 -0
- package/rules/java/java.security.spring-actuator-sensitive-exposure.rule.yaml +13 -0
- package/rules/java/java.security.spring-csrf-globally-disabled.rule.yaml +13 -0
- package/rules/java/java.security.spring-debug-exposure.rule.yaml +13 -0
- package/rules/java/java.security.spring-permit-all-default.rule.yaml +13 -0
- package/rules/java/java.security.spring-webmvc-unrestricted-data-binding.rule.yaml +13 -0
- package/rules/java/java.security.template-unescaped-user-output.rule.yaml +10 -0
- package/rules/java/java.security.trust-all-certificates.rule.yaml +52 -0
- package/rules/java/java.security.unsafe-jackson-deserialization.rule.yaml +59 -0
- package/rules/java/java.security.weak-rsa-key-size.rule.yaml +54 -0
- package/rules/java/java.security.xxe-document-builder.rule.yaml +59 -0
- package/rules/java/java.security.xxe-xml-input-factory.rule.yaml +59 -0
- package/rules/php/php.correctness.abstract-method-outside-abstract-class.rule.yaml +36 -0
- package/rules/php/php.correctness.break-continue-outside-loop.rule.yaml +36 -0
- package/rules/php/php.correctness.case-insensitive-define.rule.yaml +36 -0
- package/rules/php/php.correctness.default-parameter-not-last.rule.yaml +36 -0
- package/rules/php/php.correctness.deprecated-filter-constant.rule.yaml +36 -0
- package/rules/php/php.correctness.deprecated-libxml-entity-loader.rule.yaml +36 -0
- package/rules/php/php.correctness.deprecated-unset-cast.rule.yaml +36 -0
- package/rules/php/php.correctness.duplicate-array-key.rule.yaml +36 -0
- package/rules/php/php.correctness.duplicate-declaration.rule.yaml +36 -0
- package/rules/php/php.correctness.empty-array-literal-slot.rule.yaml +36 -0
- package/rules/php/php.correctness.empty-bracket-array-access.rule.yaml +36 -0
- package/rules/php/php.correctness.empty-code-block.rule.yaml +36 -0
- package/rules/php/php.correctness.empty-function-body.rule.yaml +36 -0
- package/rules/php/php.correctness.error-suppression-operator.rule.yaml +36 -0
- package/rules/php/php.correctness.function-comparison.rule.yaml +36 -0
- package/rules/php/php.correctness.invalid-cookie-options.rule.yaml +36 -0
- package/rules/php/php.correctness.invalid-regex-literal.rule.yaml +36 -0
- package/rules/php/php.correctness.missing-member-visibility.rule.yaml +36 -0
- package/rules/php/php.correctness.nested-function-declaration.rule.yaml +36 -0
- package/rules/php/php.correctness.nested-switch.rule.yaml +36 -0
- package/rules/php/php.correctness.nullsafe-returned-by-reference.rule.yaml +36 -0
- package/rules/php/php.correctness.redundant-string-cast-concat.rule.yaml +36 -0
- package/rules/php/php.correctness.self-assignment.rule.yaml +36 -0
- package/rules/php/php.correctness.switch-multiple-default.rule.yaml +36 -0
- package/rules/php/php.correctness.todo-fixme-marker.rule.yaml +36 -0
- package/rules/php/php.correctness.unknown-magic-method.rule.yaml +36 -0
- package/rules/php/php.correctness.unreachable-after-return.rule.yaml +36 -0
- package/rules/php/php.correctness.useless-post-increment.rule.yaml +36 -0
- package/rules/php/php.correctness.useless-unset.rule.yaml +36 -0
- package/rules/php/php.performance.expensive-loop-condition.rule.yaml +36 -0
- package/rules/php/php.security.debug-function-exposure.rule.yaml +55 -0
- package/rules/php/php.security.insecure-cors-wildcard-with-credentials.rule.yaml +10 -0
- package/rules/php/php.security.insecure-mail-or-file-transport.rule.yaml +10 -0
- package/rules/php/php.security.insecure-session-id-generation.rule.yaml +51 -0
- package/rules/php/php.security.insecure-session-or-cookie-config.rule.yaml +10 -0
- package/rules/php/php.security.laravel-sensitive-csrf-exclusion.rule.yaml +13 -0
- package/rules/php/php.security.laravel-unsafe-blade-output.rule.yaml +13 -0
- package/rules/php/php.security.laravel-unsafe-mass-assignment.rule.yaml +13 -0
- package/rules/php/php.security.no-dynamic-eval.rule.yaml +52 -0
- package/rules/php/php.security.sensitive-data-egress.rule.yaml +10 -0
- package/rules/php/php.security.symfony-csrf-disabled.rule.yaml +13 -0
- package/rules/php/php.security.symfony-debug-exposure.rule.yaml +13 -0
- package/rules/php/php.security.unsafe-file-upload-handling.rule.yaml +10 -0
- package/rules/php/php.security.unsafe-include-with-user-input.rule.yaml +52 -0
- package/rules/php/php.security.unsafe-new-static.rule.yaml +42 -0
- package/rules/php/php.security.weak-cipher.rule.yaml +51 -0
- package/rules/php/php.security.wordpress-missing-nonce-or-capability.rule.yaml +13 -0
- package/rules/php/php.security.wordpress-unprepared-sql.rule.yaml +13 -0
- package/rules/php/php.security.xml-external-entity.rule.yaml +53 -0
- package/rules/python/py.correctness.assert-on-tuple.rule.yaml +33 -0
- package/rules/python/py.correctness.bare-except.rule.yaml +33 -0
- package/rules/python/py.correctness.broad-exception-handler.rule.yaml +33 -0
- package/rules/python/py.correctness.dangerous-mutable-default.rule.yaml +33 -0
- package/rules/python/py.correctness.duplicate-dict-key.rule.yaml +33 -0
- package/rules/python/py.security.bind-all-interfaces.rule.yaml +55 -0
- package/rules/python/py.security.debugger-import.rule.yaml +55 -0
- package/rules/python/py.security.django-csrf-exempt-state-changing.rule.yaml +13 -0
- package/rules/python/py.security.django-format-html-unsafe.rule.yaml +56 -0
- package/rules/python/py.security.django-mark-safe.rule.yaml +56 -0
- package/rules/python/py.security.django-missing-csrf-middleware.rule.yaml +13 -0
- package/rules/python/py.security.django-security-middleware-missing.rule.yaml +60 -0
- package/rules/python/py.security.django-unsafe-production-settings.rule.yaml +13 -0
- package/rules/python/py.security.drf-allow-any-default.rule.yaml +13 -0
- package/rules/python/py.security.drf-allow-any-unsafe-method.rule.yaml +13 -0
- package/rules/python/py.security.dynamic-code-execution.rule.yaml +55 -0
- package/rules/python/py.security.fastapi-insecure-cors.rule.yaml +13 -0
- package/rules/python/py.security.flask-debug-enabled.rule.yaml +56 -0
- package/rules/python/py.security.flask-missing-upload-body-limit.rule.yaml +13 -0
- package/rules/python/py.security.flask-unsafe-html-output.rule.yaml +13 -0
- package/rules/python/py.security.flask-unsafe-upload-filename.rule.yaml +13 -0
- package/rules/python/py.security.insecure-temp-file.rule.yaml +55 -0
- package/rules/python/py.security.insecure-yaml-load.rule.yaml +55 -0
- package/rules/python/py.security.jinja-autoescape-disabled.rule.yaml +58 -0
- package/rules/python/py.security.subprocess-shell-enabled.rule.yaml +55 -0
- package/rules/ruby/ruby.bug-risk.assignment-in-condition.rule.yaml +42 -0
- package/rules/ruby/ruby.bug-risk.deprecated-uri-escape.rule.yaml +42 -0
- package/rules/ruby/ruby.bug-risk.division-by-zero.rule.yaml +42 -0
- package/rules/ruby/ruby.bug-risk.duplicate-hash-keys.rule.yaml +42 -0
- package/rules/ruby/ruby.bug-risk.exception-class-overwritten.rule.yaml +42 -0
- package/rules/ruby/ruby.bug-risk.raw-sql-without-squish.rule.yaml +42 -0
- package/rules/ruby/ruby.security.debugger-call.rule.yaml +53 -0
- package/rules/ruby/ruby.security.dynamic-code-execution.rule.yaml +54 -0
- package/rules/ruby/ruby.security.insecure-json-load.rule.yaml +53 -0
- package/rules/ruby/ruby.security.kernel-open.rule.yaml +53 -0
- package/rules/ruby/ruby.security.plaintext-password-in-callback.rule.yaml +46 -0
- package/rules/ruby/ruby.security.rails-csrf-disabled.rule.yaml +13 -0
- package/rules/ruby/ruby.security.rails-detailed-exceptions-enabled.rule.yaml +13 -0
- package/rules/ruby/ruby.security.rails-link-to-blank-without-noopener.rule.yaml +48 -0
- package/rules/ruby/ruby.security.rails-open-redirect.rule.yaml +13 -0
- package/rules/ruby/ruby.security.rails-output-unsafe.rule.yaml +47 -0
- package/rules/ruby/ruby.security.rails-unsafe-html-output.rule.yaml +13 -0
- package/rules/ruby/ruby.security.rails-unsafe-render.rule.yaml +13 -0
- package/rules/ruby/ruby.security.rails-unsafe-session-or-cookie-store.rule.yaml +13 -0
- package/rules/ruby/ruby.security.rails-unsafe-strong-parameters.rule.yaml +13 -0
- package/rules/ruby/ruby.security.sensitive-data-egress.rule.yaml +10 -0
- package/rules/ruby/ruby.security.sidekiq-web-unauthenticated-mount.rule.yaml +10 -0
- package/rules/rust/rust.correctness.block-on-in-async.rule.yaml +48 -0
- package/rules/rust/rust.correctness.forget-join-handle.rule.yaml +48 -0
- package/rules/rust/rust.correctness.mutex-held-across-await.rule.yaml +48 -0
- package/rules/rust/rust.correctness.std-mutex-in-async-fn.rule.yaml +48 -0
- package/rules/rust/rust.correctness.thread-sleep-in-async.rule.yaml +48 -0
- package/rules/rust/rust.correctness.unbounded-channel.rule.yaml +49 -0
- package/rules/rust/rust.correctness.unchecked-index.rule.yaml +46 -0
- package/rules/rust/rust.security.actix-wildcard-cors-with-credentials.rule.yaml +13 -0
- package/rules/rust/rust.security.axum-body-limit-disabled.rule.yaml +13 -0
- package/rules/rust/rust.security.axum-insecure-cors-with-credentials.rule.yaml +13 -0
- package/rules/rust/rust.security.bind-all-interfaces.rule.yaml +57 -0
- package/rules/rust/rust.security.insecure-ssh-host-key.rule.yaml +57 -0
- package/rules/rust/rust.security.insecure-ssl-protocol.rule.yaml +57 -0
- package/rules/rust/rust.security.insecure-temp-file.rule.yaml +57 -0
- package/rules/rust/rust.security.insecure-yaml-load.rule.yaml +57 -0
- package/rules/rust/rust.security.jwt-without-verification.rule.yaml +57 -0
- package/rules/rust/rust.security.panic-in-async-handler.rule.yaml +57 -0
- package/rules/rust/rust.security.rocket-panic-prone-request-handler.rule.yaml +13 -0
- package/rules/rust/rust.security.rocket-unsafe-template-output.rule.yaml +13 -0
- package/rules/rust/rust.security.shell-command-spawn.rule.yaml +57 -0
- package/rules/rust/rust.security.sqlx-diesel-raw-interpolated-query.rule.yaml +13 -0
- package/rules/rust/rust.security.template-unescaped-request-value.rule.yaml +10 -0
- package/rules/rust/rust.security.tls-missing-min-version.rule.yaml +57 -0
- package/rules/rust/rust.security.warp-blocking-or-panic-in-async-handler.rule.yaml +13 -0
- package/rules/rust/rust.security.weak-crypto-import.rule.yaml +55 -0
- package/rules/rust/rust.security.weak-rsa-key-size.rule.yaml +57 -0
- package/rules/rust/rust.security.weak-tls-cipher.rule.yaml +57 -0
- package/rules/shared/security.archive-path-traversal.rule.yaml +10 -0
- package/rules/shared/security.external-file-upload.rule.yaml +10 -0
- package/rules/shared/security.insecure-http-transport.rule.yaml +10 -0
- package/rules/shared/security.no-command-execution-with-request-input.rule.yaml +10 -0
- package/rules/shared/security.no-hardcoded-credentials.rule.yaml +10 -0
- package/rules/shared/security.no-request-path-file-read.rule.yaml +10 -0
- package/rules/shared/security.no-sensitive-data-in-logs-and-telemetry.rule.yaml +10 -0
- package/rules/shared/security.no-sql-interpolation.rule.yaml +10 -0
- package/rules/shared/security.permissive-file-permissions.rule.yaml +10 -0
- package/rules/shared/security.sensitive-data-egress.rule.yaml +10 -0
- package/rules/shared/security.tls-verification-disabled.rule.yaml +10 -0
- package/rules/shared/security.unsafe-deserialization.rule.yaml +10 -0
- package/rules/shared/security.weak-hash-algorithm.rule.yaml +10 -0
- package/rules/typescript/ts.correctness.array-callback-missing-return.rule.yaml +35 -0
- package/rules/typescript/ts.correctness.array-sort-without-compare.rule.yaml +35 -0
- package/rules/typescript/ts.correctness.control-flow-in-finally.rule.yaml +35 -0
- package/rules/typescript/ts.correctness.duplicate-if-else-condition.rule.yaml +35 -0
- package/rules/typescript/ts.correctness.for-in-on-array.rule.yaml +35 -0
- package/rules/typescript/ts.correctness.infinite-loop.rule.yaml +32 -0
- package/rules/typescript/ts.correctness.invalid-await-expression.rule.yaml +32 -0
- package/rules/typescript/ts.correctness.invalid-typeof-comparison.rule.yaml +35 -0
- package/rules/typescript/ts.correctness.missing-async-on-promise-method.rule.yaml +32 -0
- package/rules/typescript/ts.correctness.missing-super-call.rule.yaml +35 -0
- package/rules/typescript/ts.correctness.no-floating-promise-in-function.rule.yaml +32 -0
- package/rules/typescript/ts.correctness.no-misused-promises.rule.yaml +32 -0
- package/rules/typescript/ts.correctness.promise-reject-non-error.rule.yaml +35 -0
- package/rules/typescript/ts.correctness.this-before-super.rule.yaml +35 -0
- package/rules/typescript/ts.correctness.unnecessary-return-await.rule.yaml +32 -0
- package/rules/typescript/ts.correctness.use-number-is-nan.rule.yaml +35 -0
- package/rules/typescript/ts.next.server-action-missing-local-auth.rule.yaml +13 -0
- package/rules/typescript/ts.performance.no-await-in-loop.rule.yaml +32 -0
- package/rules/typescript/ts.quality.no-empty-function.rule.yaml +32 -0
- package/rules/typescript/ts.react.no-bind-in-jsx-props.rule.yaml +36 -0
- package/rules/typescript/ts.react.no-children-prop.rule.yaml +34 -0
- package/rules/typescript/ts.react.no-direct-state-mutation.rule.yaml +34 -0
- package/rules/typescript/ts.react.no-duplicate-jsx-attributes.rule.yaml +34 -0
- package/rules/typescript/ts.react.no-jsx-props-spread.rule.yaml +35 -0
- package/rules/typescript/ts.react.no-set-state-in-component-did-mount.rule.yaml +34 -0
- package/rules/typescript/ts.react.no-set-state-in-component-did-update.rule.yaml +34 -0
- package/rules/typescript/ts.react.no-target-blank-without-rel.rule.yaml +46 -0
- package/rules/typescript/ts.react.no-this-in-function-component.rule.yaml +34 -0
- package/rules/typescript/ts.runtime.no-process-exit.rule.yaml +44 -0
- package/rules/typescript/ts.security.ajv-insecure-configuration.rule.yaml +10 -0
- package/rules/typescript/ts.security.angular-dom-sanitizer-bypass-untrusted-input.rule.yaml +13 -0
- package/rules/typescript/ts.security.apollo-server-csrf-disabled.rule.yaml +16 -0
- package/rules/typescript/ts.security.apollo-server-graphql-dev-tooling-exposure.rule.yaml +16 -0
- package/rules/typescript/ts.security.apollo-server-introspection-exposure.rule.yaml +16 -0
- package/rules/typescript/ts.security.apollo-server-missing-query-limits.rule.yaml +16 -0
- package/rules/typescript/ts.security.astro-vite-public-secret-define.rule.yaml +13 -0
- package/rules/typescript/ts.security.bind-to-all-interfaces.rule.yaml +10 -0
- package/rules/typescript/ts.security.browser-token-storage.rule.yaml +10 -0
- package/rules/typescript/ts.security.dangerous-insert-html.rule.yaml +10 -0
- package/rules/typescript/ts.security.dangerously-set-inner-html.rule.yaml +10 -0
- package/rules/typescript/ts.security.datadog-browser-track-user-interactions.rule.yaml +10 -0
- package/rules/typescript/ts.security.debug-mode-enabled.rule.yaml +10 -0
- package/rules/typescript/ts.security.debug-statement-in-source.rule.yaml +10 -0
- package/rules/typescript/ts.security.dynamodb-query-injection.rule.yaml +10 -0
- package/rules/typescript/ts.security.electron-dangerous-webpreferences.rule.yaml +10 -0
- package/rules/typescript/ts.security.electron-insecure-local-state.rule.yaml +10 -0
- package/rules/typescript/ts.security.electron-missing-ipc-origin-check.rule.yaml +10 -0
- package/rules/typescript/ts.security.electron-shell-open-external-unvalidated.rule.yaml +13 -0
- package/rules/typescript/ts.security.exposed-directory-listing.rule.yaml +10 -0
- package/rules/typescript/ts.security.express-cookie-missing-http-only.rule.yaml +16 -0
- package/rules/typescript/ts.security.express-default-cookie-config.rule.yaml +16 -0
- package/rules/typescript/ts.security.express-default-session-config.rule.yaml +16 -0
- package/rules/typescript/ts.security.express-error-handler-information-disclosure.rule.yaml +16 -0
- package/rules/typescript/ts.security.express-insecure-cookie.rule.yaml +16 -0
- package/rules/typescript/ts.security.express-missing-helmet.rule.yaml +16 -0
- package/rules/typescript/ts.security.express-nosql-injection.rule.yaml +16 -0
- package/rules/typescript/ts.security.express-permissive-cookie-config.rule.yaml +16 -0
- package/rules/typescript/ts.security.express-permissive-cors.rule.yaml +52 -0
- package/rules/typescript/ts.security.express-reduce-fingerprint.rule.yaml +16 -0
- package/rules/typescript/ts.security.express-static-assets-after-session.rule.yaml +16 -0
- package/rules/typescript/ts.security.express-static-dotfiles-allow.rule.yaml +16 -0
- package/rules/typescript/ts.security.express-unbounded-body-parser.rule.yaml +16 -0
- package/rules/typescript/ts.security.express-user-controlled-static-mount.rule.yaml +16 -0
- package/rules/typescript/ts.security.external-file-upload.rule.yaml +10 -0
- package/rules/typescript/ts.security.fastify-excessive-body-limit.rule.yaml +16 -0
- package/rules/typescript/ts.security.fastify-public-bind-without-trust-proxy.rule.yaml +16 -0
- package/rules/typescript/ts.security.file-generation.rule.yaml +10 -0
- package/rules/typescript/ts.security.format-string-using-user-input.rule.yaml +10 -0
- package/rules/typescript/ts.security.frontend-only-authorization.rule.yaml +10 -0
- package/rules/typescript/ts.security.graphql-upload-without-csrf-guard.rule.yaml +16 -0
- package/rules/typescript/ts.security.handlebars-no-escape.rule.yaml +10 -0
- package/rules/typescript/ts.security.hardcoded-auth-secret.rule.yaml +10 -0
- package/rules/typescript/ts.security.iframe-missing-sandbox-attribute.rule.yaml +10 -0
- package/rules/typescript/ts.security.import-using-user-input.rule.yaml +10 -0
- package/rules/typescript/ts.security.information-leakage.rule.yaml +10 -0
- package/rules/typescript/ts.security.insecure-allow-origin.rule.yaml +10 -0
- package/rules/typescript/ts.security.insecure-auth-cookie-flags.rule.yaml +10 -0
- package/rules/typescript/ts.security.insecure-content-security-policy-literal.rule.yaml +10 -0
- package/rules/typescript/ts.security.insecure-helmet-hardening-options.rule.yaml +10 -0
- package/rules/typescript/ts.security.insecure-password-hash-configuration.rule.yaml +10 -0
- package/rules/typescript/ts.security.insecure-websocket-transport.rule.yaml +10 -0
- package/rules/typescript/ts.security.insufficiently-random-values.rule.yaml +10 -0
- package/rules/typescript/ts.security.jwt-insecure-signing-algorithm.rule.yaml +10 -0
- package/rules/typescript/ts.security.jwt-not-revoked.rule.yaml +10 -0
- package/rules/typescript/ts.security.jwt-sensitive-claims.rule.yaml +10 -0
- package/rules/typescript/ts.security.legacy-buffer-constructor.rule.yaml +10 -0
- package/rules/typescript/ts.security.log-injection.rule.yaml +10 -0
- package/rules/typescript/ts.security.manual-html-sanitization.rule.yaml +10 -0
- package/rules/typescript/ts.security.missing-authorization-before-sensitive-action.rule.yaml +10 -0
- package/rules/typescript/ts.security.missing-integrity-check.rule.yaml +10 -0
- package/rules/typescript/ts.security.missing-message-origin-check.rule.yaml +10 -0
- package/rules/typescript/ts.security.missing-ownership-validation.rule.yaml +10 -0
- package/rules/typescript/ts.security.missing-request-timeout-or-retry.rule.yaml +10 -0
- package/rules/typescript/ts.security.nestjs-helmet-after-route-mount.rule.yaml +16 -0
- package/rules/typescript/ts.security.nestjs-missing-global-validation-pipe.rule.yaml +16 -0
- package/rules/typescript/ts.security.nestjs-skip-throttle-sensitive-route.rule.yaml +16 -0
- package/rules/typescript/ts.security.nestjs-validation-pipe-without-whitelist.rule.yaml +16 -0
- package/rules/typescript/ts.security.no-alert-confirm-prompt.rule.yaml +44 -0
- package/rules/typescript/ts.security.no-arguments-callee.rule.yaml +44 -0
- package/rules/typescript/ts.security.no-assign-mutable-export.rule.yaml +45 -0
- package/rules/typescript/ts.security.no-dynamic-execution.rule.yaml +10 -0
- package/rules/typescript/ts.security.no-fs-readfile-sync-in-handler.rule.yaml +46 -0
- package/rules/typescript/ts.security.no-global-native-reassignment.rule.yaml +44 -0
- package/rules/typescript/ts.security.no-innerhtml-assignment.rule.yaml +10 -0
- package/rules/typescript/ts.security.no-javascript-url.rule.yaml +44 -0
- package/rules/typescript/ts.security.no-native-prototype-extension.rule.yaml +44 -0
- package/rules/typescript/ts.security.no-sync-child-process-exec.rule.yaml +45 -0
- package/rules/typescript/ts.security.no-throw-literal.rule.yaml +44 -0
- package/rules/typescript/ts.security.no-with-statement.rule.yaml +44 -0
- package/rules/typescript/ts.security.non-literal-fs-filename.rule.yaml +10 -0
- package/rules/typescript/ts.security.nuxt-public-runtime-secret.rule.yaml +13 -0
- package/rules/typescript/ts.security.observable-timing-discrepancy.rule.yaml +10 -0
- package/rules/typescript/ts.security.open-redirect.rule.yaml +10 -0
- package/rules/typescript/ts.security.permissive-allow-origin.rule.yaml +10 -0
- package/rules/typescript/ts.security.permissive-file-permissions.rule.yaml +10 -0
- package/rules/typescript/ts.security.postmessage-wildcard-origin.rule.yaml +10 -0
- package/rules/typescript/ts.security.predictable-token-generation.rule.yaml +10 -0
- package/rules/typescript/ts.security.raw-html-using-user-input.rule.yaml +10 -0
- package/rules/typescript/ts.security.request-driven-array-index-access.rule.yaml +10 -0
- package/rules/typescript/ts.security.sensitive-data-egress.rule.yaml +10 -0
- package/rules/typescript/ts.security.sensitive-data-in-exception.rule.yaml +10 -0
- package/rules/typescript/ts.security.sensitive-data-written-to-file.rule.yaml +10 -0
- package/rules/typescript/ts.security.ssrf.rule.yaml +10 -0
- package/rules/typescript/ts.security.token-or-session-not-validated.rule.yaml +10 -0
- package/rules/typescript/ts.security.ui-redress.rule.yaml +10 -0
- package/rules/typescript/ts.security.unsafe-dirname-path-concat.rule.yaml +44 -0
- package/rules/typescript/ts.security.unsafe-dompurify-version.rule.yaml +10 -0
- package/rules/typescript/ts.security.unsafe-marked-version.rule.yaml +10 -0
- package/rules/typescript/ts.security.unsanitized-http-response.rule.yaml +10 -0
- package/rules/typescript/ts.security.unvalidated-external-input.rule.yaml +10 -0
- package/rules/typescript/ts.security.user-controlled-sendfile.rule.yaml +10 -0
- package/rules/typescript/ts.security.user-controlled-view-render.rule.yaml +10 -0
- package/rules/typescript/ts.security.weak-cipher-or-mode.rule.yaml +10 -0
- package/rules/typescript/ts.security.weak-key-strength.rule.yaml +10 -0
- package/rules/typescript/ts.security.weak-tls-version.rule.yaml +10 -0
- package/rules/typescript/ts.security.xml-parse-string-with-untrusted-input.rule.yaml +10 -0
package/catalog.yaml
CHANGED
|
@@ -21,6 +21,11 @@ rules:
|
|
|
21
21
|
presets:
|
|
22
22
|
- recommended
|
|
23
23
|
- strict
|
|
24
|
+
- id: ts.correctness.control-flow-in-finally
|
|
25
|
+
rulePath: ./rules/typescript/ts.correctness.control-flow-in-finally.rule.yaml
|
|
26
|
+
presets:
|
|
27
|
+
- recommended
|
|
28
|
+
- strict
|
|
24
29
|
- id: ts.correctness.missing-await-on-async-call
|
|
25
30
|
rulePath: ./rules/typescript/ts.correctness.missing-await-on-async-call.rule.yaml
|
|
26
31
|
presets:
|
|
@@ -42,6 +47,11 @@ rules:
|
|
|
42
47
|
presets:
|
|
43
48
|
- recommended
|
|
44
49
|
- strict
|
|
50
|
+
- id: ts.correctness.invalid-typeof-comparison
|
|
51
|
+
rulePath: ./rules/typescript/ts.correctness.invalid-typeof-comparison.rule.yaml
|
|
52
|
+
presets:
|
|
53
|
+
- recommended
|
|
54
|
+
- strict
|
|
45
55
|
- id: ts.correctness.blocking-call-in-async-flow
|
|
46
56
|
rulePath: ./rules/typescript/ts.correctness.blocking-call-in-async-flow.rule.yaml
|
|
47
57
|
presets:
|
|
@@ -52,6 +62,11 @@ rules:
|
|
|
52
62
|
presets:
|
|
53
63
|
- recommended
|
|
54
64
|
- strict
|
|
65
|
+
- id: ts.correctness.missing-super-call
|
|
66
|
+
rulePath: ./rules/typescript/ts.correctness.missing-super-call.rule.yaml
|
|
67
|
+
presets:
|
|
68
|
+
- recommended
|
|
69
|
+
- strict
|
|
55
70
|
- id: ts.correctness.missing-timeout-on-external-call
|
|
56
71
|
rulePath: ./rules/typescript/ts.correctness.missing-timeout-on-external-call.rule.yaml
|
|
57
72
|
presets:
|
|
@@ -63,6 +78,11 @@ rules:
|
|
|
63
78
|
presets:
|
|
64
79
|
- recommended
|
|
65
80
|
- strict
|
|
81
|
+
- id: ts.correctness.promise-reject-non-error
|
|
82
|
+
rulePath: ./rules/typescript/ts.correctness.promise-reject-non-error.rule.yaml
|
|
83
|
+
presets:
|
|
84
|
+
- recommended
|
|
85
|
+
- strict
|
|
66
86
|
- id: ts.correctness.nested-property-access-without-check
|
|
67
87
|
rulePath: ./rules/typescript/ts.correctness.nested-property-access-without-check.rule.yaml
|
|
68
88
|
presets:
|
|
@@ -87,11 +107,26 @@ rules:
|
|
|
87
107
|
rulePath: ./rules/typescript/ts.correctness.shared-state-race.rule.yaml
|
|
88
108
|
presets:
|
|
89
109
|
- experimental
|
|
110
|
+
- id: ts.correctness.this-before-super
|
|
111
|
+
rulePath: ./rules/typescript/ts.correctness.this-before-super.rule.yaml
|
|
112
|
+
presets:
|
|
113
|
+
- recommended
|
|
114
|
+
- strict
|
|
90
115
|
- id: ts.correctness.unreachable-statement
|
|
91
116
|
rulePath: ./rules/typescript/ts.correctness.unreachable-statement.rule.yaml
|
|
92
117
|
presets:
|
|
93
118
|
- recommended
|
|
94
119
|
- strict
|
|
120
|
+
- id: ts.correctness.array-callback-missing-return
|
|
121
|
+
rulePath: ./rules/typescript/ts.correctness.array-callback-missing-return.rule.yaml
|
|
122
|
+
presets:
|
|
123
|
+
- recommended
|
|
124
|
+
- strict
|
|
125
|
+
- id: ts.correctness.array-sort-without-compare
|
|
126
|
+
rulePath: ./rules/typescript/ts.correctness.array-sort-without-compare.rule.yaml
|
|
127
|
+
presets:
|
|
128
|
+
- recommended
|
|
129
|
+
- strict
|
|
95
130
|
- id: ts.correctness.assignment-in-condition
|
|
96
131
|
rulePath: ./rules/typescript/ts.correctness.assignment-in-condition.rule.yaml
|
|
97
132
|
presets:
|
|
@@ -102,6 +137,11 @@ rules:
|
|
|
102
137
|
presets:
|
|
103
138
|
- recommended
|
|
104
139
|
- strict
|
|
140
|
+
- id: ts.correctness.duplicate-if-else-condition
|
|
141
|
+
rulePath: ./rules/typescript/ts.correctness.duplicate-if-else-condition.rule.yaml
|
|
142
|
+
presets:
|
|
143
|
+
- recommended
|
|
144
|
+
- strict
|
|
105
145
|
- id: ts.correctness.duplicate-object-key
|
|
106
146
|
rulePath: ./rules/typescript/ts.correctness.duplicate-object-key.rule.yaml
|
|
107
147
|
presets:
|
|
@@ -117,6 +157,36 @@ rules:
|
|
|
117
157
|
presets:
|
|
118
158
|
- recommended
|
|
119
159
|
- strict
|
|
160
|
+
- id: ts.correctness.infinite-loop
|
|
161
|
+
rulePath: ./rules/typescript/ts.correctness.infinite-loop.rule.yaml
|
|
162
|
+
presets:
|
|
163
|
+
- recommended
|
|
164
|
+
- strict
|
|
165
|
+
- id: ts.correctness.unnecessary-return-await
|
|
166
|
+
rulePath: ./rules/typescript/ts.correctness.unnecessary-return-await.rule.yaml
|
|
167
|
+
presets:
|
|
168
|
+
- recommended
|
|
169
|
+
- strict
|
|
170
|
+
- id: ts.correctness.invalid-await-expression
|
|
171
|
+
rulePath: ./rules/typescript/ts.correctness.invalid-await-expression.rule.yaml
|
|
172
|
+
presets:
|
|
173
|
+
- recommended
|
|
174
|
+
- strict
|
|
175
|
+
- id: ts.correctness.missing-async-on-promise-method
|
|
176
|
+
rulePath: ./rules/typescript/ts.correctness.missing-async-on-promise-method.rule.yaml
|
|
177
|
+
presets:
|
|
178
|
+
- recommended
|
|
179
|
+
- strict
|
|
180
|
+
- id: ts.correctness.no-floating-promise-in-function
|
|
181
|
+
rulePath: ./rules/typescript/ts.correctness.no-floating-promise-in-function.rule.yaml
|
|
182
|
+
presets:
|
|
183
|
+
- recommended
|
|
184
|
+
- strict
|
|
185
|
+
- id: ts.correctness.no-misused-promises
|
|
186
|
+
rulePath: ./rules/typescript/ts.correctness.no-misused-promises.rule.yaml
|
|
187
|
+
presets:
|
|
188
|
+
- recommended
|
|
189
|
+
- strict
|
|
120
190
|
- id: ts.correctness.assignment-to-import-binding
|
|
121
191
|
rulePath: ./rules/typescript/ts.correctness.assignment-to-import-binding.rule.yaml
|
|
122
192
|
presets:
|
|
@@ -142,6 +212,11 @@ rules:
|
|
|
142
212
|
presets:
|
|
143
213
|
- recommended
|
|
144
214
|
- strict
|
|
215
|
+
- id: ts.correctness.for-in-on-array
|
|
216
|
+
rulePath: ./rules/typescript/ts.correctness.for-in-on-array.rule.yaml
|
|
217
|
+
presets:
|
|
218
|
+
- recommended
|
|
219
|
+
- strict
|
|
145
220
|
- id: ts.correctness.reassign-catch-binding
|
|
146
221
|
rulePath: ./rules/typescript/ts.correctness.reassign-catch-binding.rule.yaml
|
|
147
222
|
presets:
|
|
@@ -152,6 +227,11 @@ rules:
|
|
|
152
227
|
presets:
|
|
153
228
|
- recommended
|
|
154
229
|
- strict
|
|
230
|
+
- id: ts.correctness.use-number-is-nan
|
|
231
|
+
rulePath: ./rules/typescript/ts.correctness.use-number-is-nan.rule.yaml
|
|
232
|
+
presets:
|
|
233
|
+
- recommended
|
|
234
|
+
- strict
|
|
155
235
|
- id: ts.quality.swallowed-error
|
|
156
236
|
rulePath: ./rules/typescript/ts.quality.swallowed-error.rule.yaml
|
|
157
237
|
presets:
|
|
@@ -237,6 +317,11 @@ rules:
|
|
|
237
317
|
rulePath: ./rules/typescript/ts.quality.no-dead-export.rule.yaml
|
|
238
318
|
presets:
|
|
239
319
|
- strict
|
|
320
|
+
- id: ts.quality.no-empty-function
|
|
321
|
+
rulePath: ./rules/typescript/ts.quality.no-empty-function.rule.yaml
|
|
322
|
+
presets:
|
|
323
|
+
- recommended
|
|
324
|
+
- strict
|
|
240
325
|
- id: ts.testing.no-focused-test
|
|
241
326
|
rulePath: ./rules/typescript/ts.testing.no-focused-test.rule.yaml
|
|
242
327
|
presets:
|
|
@@ -369,6 +454,11 @@ rules:
|
|
|
369
454
|
presets:
|
|
370
455
|
- recommended
|
|
371
456
|
- strict
|
|
457
|
+
- id: ts.performance.no-await-in-loop
|
|
458
|
+
rulePath: ./rules/typescript/ts.performance.no-await-in-loop.rule.yaml
|
|
459
|
+
presets:
|
|
460
|
+
- recommended
|
|
461
|
+
- strict
|
|
372
462
|
- id: ts.performance.no-cache-miss-from-unstable-key
|
|
373
463
|
rulePath: ./rules/typescript/ts.performance.no-cache-miss-from-unstable-key.rule.yaml
|
|
374
464
|
presets:
|
|
@@ -398,6 +488,131 @@ rules:
|
|
|
398
488
|
rulePath: ./rules/java/java.performance.no-unbounded-concurrency.rule.yaml
|
|
399
489
|
presets:
|
|
400
490
|
- strict
|
|
491
|
+
- id: php.correctness.duplicate-array-key
|
|
492
|
+
rulePath: ./rules/php/php.correctness.duplicate-array-key.rule.yaml
|
|
493
|
+
presets:
|
|
494
|
+
- strict
|
|
495
|
+
- id: php.correctness.error-suppression-operator
|
|
496
|
+
rulePath: ./rules/php/php.correctness.error-suppression-operator.rule.yaml
|
|
497
|
+
presets:
|
|
498
|
+
- strict
|
|
499
|
+
- id: php.correctness.nullsafe-returned-by-reference
|
|
500
|
+
rulePath: ./rules/php/php.correctness.nullsafe-returned-by-reference.rule.yaml
|
|
501
|
+
presets:
|
|
502
|
+
- strict
|
|
503
|
+
- id: php.correctness.switch-multiple-default
|
|
504
|
+
rulePath: ./rules/php/php.correctness.switch-multiple-default.rule.yaml
|
|
505
|
+
presets:
|
|
506
|
+
- strict
|
|
507
|
+
- id: php.correctness.unreachable-after-return
|
|
508
|
+
rulePath: ./rules/php/php.correctness.unreachable-after-return.rule.yaml
|
|
509
|
+
presets:
|
|
510
|
+
- strict
|
|
511
|
+
|
|
512
|
+
- id: php.security.unsafe-new-static
|
|
513
|
+
rulePath: ./rules/php/php.security.unsafe-new-static.rule.yaml
|
|
514
|
+
presets:
|
|
515
|
+
- strict
|
|
516
|
+
- id: php.correctness.empty-array-literal-slot
|
|
517
|
+
rulePath: ./rules/php/php.correctness.empty-array-literal-slot.rule.yaml
|
|
518
|
+
presets:
|
|
519
|
+
- strict
|
|
520
|
+
- id: php.correctness.empty-bracket-array-access
|
|
521
|
+
rulePath: ./rules/php/php.correctness.empty-bracket-array-access.rule.yaml
|
|
522
|
+
presets:
|
|
523
|
+
- strict
|
|
524
|
+
- id: php.correctness.deprecated-unset-cast
|
|
525
|
+
rulePath: ./rules/php/php.correctness.deprecated-unset-cast.rule.yaml
|
|
526
|
+
presets:
|
|
527
|
+
- strict
|
|
528
|
+
- id: php.correctness.duplicate-declaration
|
|
529
|
+
rulePath: ./rules/php/php.correctness.duplicate-declaration.rule.yaml
|
|
530
|
+
presets:
|
|
531
|
+
- strict
|
|
532
|
+
- id: php.correctness.nested-function-declaration
|
|
533
|
+
rulePath: ./rules/php/php.correctness.nested-function-declaration.rule.yaml
|
|
534
|
+
presets:
|
|
535
|
+
- strict
|
|
536
|
+
- id: php.correctness.break-continue-outside-loop
|
|
537
|
+
rulePath: ./rules/php/php.correctness.break-continue-outside-loop.rule.yaml
|
|
538
|
+
presets:
|
|
539
|
+
- strict
|
|
540
|
+
- id: php.correctness.abstract-method-outside-abstract-class
|
|
541
|
+
rulePath: ./rules/php/php.correctness.abstract-method-outside-abstract-class.rule.yaml
|
|
542
|
+
presets:
|
|
543
|
+
- strict
|
|
544
|
+
- id: php.correctness.useless-unset
|
|
545
|
+
rulePath: ./rules/php/php.correctness.useless-unset.rule.yaml
|
|
546
|
+
presets:
|
|
547
|
+
- strict
|
|
548
|
+
- id: php.correctness.invalid-regex-literal
|
|
549
|
+
rulePath: ./rules/php/php.correctness.invalid-regex-literal.rule.yaml
|
|
550
|
+
presets:
|
|
551
|
+
- strict
|
|
552
|
+
- id: php.correctness.todo-fixme-marker
|
|
553
|
+
rulePath: ./rules/php/php.correctness.todo-fixme-marker.rule.yaml
|
|
554
|
+
presets:
|
|
555
|
+
- strict
|
|
556
|
+
- id: php.correctness.self-assignment
|
|
557
|
+
rulePath: ./rules/php/php.correctness.self-assignment.rule.yaml
|
|
558
|
+
presets:
|
|
559
|
+
- strict
|
|
560
|
+
- id: php.correctness.default-parameter-not-last
|
|
561
|
+
rulePath: ./rules/php/php.correctness.default-parameter-not-last.rule.yaml
|
|
562
|
+
presets:
|
|
563
|
+
- strict
|
|
564
|
+
- id: php.correctness.empty-function-body
|
|
565
|
+
rulePath: ./rules/php/php.correctness.empty-function-body.rule.yaml
|
|
566
|
+
presets:
|
|
567
|
+
- strict
|
|
568
|
+
- id: php.correctness.unknown-magic-method
|
|
569
|
+
rulePath: ./rules/php/php.correctness.unknown-magic-method.rule.yaml
|
|
570
|
+
presets:
|
|
571
|
+
- strict
|
|
572
|
+
- id: php.correctness.case-insensitive-define
|
|
573
|
+
rulePath: ./rules/php/php.correctness.case-insensitive-define.rule.yaml
|
|
574
|
+
presets:
|
|
575
|
+
- strict
|
|
576
|
+
- id: php.correctness.deprecated-filter-constant
|
|
577
|
+
rulePath: ./rules/php/php.correctness.deprecated-filter-constant.rule.yaml
|
|
578
|
+
presets:
|
|
579
|
+
- strict
|
|
580
|
+
- id: php.correctness.empty-code-block
|
|
581
|
+
rulePath: ./rules/php/php.correctness.empty-code-block.rule.yaml
|
|
582
|
+
presets:
|
|
583
|
+
- strict
|
|
584
|
+
- id: php.correctness.deprecated-libxml-entity-loader
|
|
585
|
+
rulePath: ./rules/php/php.correctness.deprecated-libxml-entity-loader.rule.yaml
|
|
586
|
+
presets:
|
|
587
|
+
- strict
|
|
588
|
+
- id: php.correctness.redundant-string-cast-concat
|
|
589
|
+
rulePath: ./rules/php/php.correctness.redundant-string-cast-concat.rule.yaml
|
|
590
|
+
presets:
|
|
591
|
+
- strict
|
|
592
|
+
- id: php.correctness.missing-member-visibility
|
|
593
|
+
rulePath: ./rules/php/php.correctness.missing-member-visibility.rule.yaml
|
|
594
|
+
presets:
|
|
595
|
+
- strict
|
|
596
|
+
- id: php.correctness.function-comparison
|
|
597
|
+
rulePath: ./rules/php/php.correctness.function-comparison.rule.yaml
|
|
598
|
+
presets:
|
|
599
|
+
- strict
|
|
600
|
+
- id: php.correctness.useless-post-increment
|
|
601
|
+
rulePath: ./rules/php/php.correctness.useless-post-increment.rule.yaml
|
|
602
|
+
presets:
|
|
603
|
+
- strict
|
|
604
|
+
- id: php.correctness.nested-switch
|
|
605
|
+
rulePath: ./rules/php/php.correctness.nested-switch.rule.yaml
|
|
606
|
+
presets:
|
|
607
|
+
- strict
|
|
608
|
+
- id: php.correctness.invalid-cookie-options
|
|
609
|
+
rulePath: ./rules/php/php.correctness.invalid-cookie-options.rule.yaml
|
|
610
|
+
presets:
|
|
611
|
+
- strict
|
|
612
|
+
- id: php.performance.expensive-loop-condition
|
|
613
|
+
rulePath: ./rules/php/php.performance.expensive-loop-condition.rule.yaml
|
|
614
|
+
presets:
|
|
615
|
+
- strict
|
|
401
616
|
- id: php.performance.no-regex-construction-in-loop
|
|
402
617
|
rulePath: ./rules/php/php.performance.no-regex-construction-in-loop.rule.yaml
|
|
403
618
|
presets:
|
|
@@ -422,6 +637,31 @@ rules:
|
|
|
422
637
|
rulePath: ./rules/python/py.performance.no-unbounded-concurrency.rule.yaml
|
|
423
638
|
presets:
|
|
424
639
|
- strict
|
|
640
|
+
- id: py.correctness.assert-on-tuple
|
|
641
|
+
rulePath: ./rules/python/py.correctness.assert-on-tuple.rule.yaml
|
|
642
|
+
presets:
|
|
643
|
+
- recommended
|
|
644
|
+
- strict
|
|
645
|
+
- id: py.correctness.bare-except
|
|
646
|
+
rulePath: ./rules/python/py.correctness.bare-except.rule.yaml
|
|
647
|
+
presets:
|
|
648
|
+
- recommended
|
|
649
|
+
- strict
|
|
650
|
+
- id: py.correctness.broad-exception-handler
|
|
651
|
+
rulePath: ./rules/python/py.correctness.broad-exception-handler.rule.yaml
|
|
652
|
+
presets:
|
|
653
|
+
- recommended
|
|
654
|
+
- strict
|
|
655
|
+
- id: py.correctness.dangerous-mutable-default
|
|
656
|
+
rulePath: ./rules/python/py.correctness.dangerous-mutable-default.rule.yaml
|
|
657
|
+
presets:
|
|
658
|
+
- recommended
|
|
659
|
+
- strict
|
|
660
|
+
- id: py.correctness.duplicate-dict-key
|
|
661
|
+
rulePath: ./rules/python/py.correctness.duplicate-dict-key.rule.yaml
|
|
662
|
+
presets:
|
|
663
|
+
- recommended
|
|
664
|
+
- strict
|
|
425
665
|
- id: ruby.performance.no-regex-construction-in-loop
|
|
426
666
|
rulePath: ./rules/ruby/ruby.performance.no-regex-construction-in-loop.rule.yaml
|
|
427
667
|
presets:
|
|
@@ -434,6 +674,34 @@ rules:
|
|
|
434
674
|
rulePath: ./rules/ruby/ruby.performance.no-unbounded-concurrency.rule.yaml
|
|
435
675
|
presets:
|
|
436
676
|
- strict
|
|
677
|
+
- id: rust.correctness.block-on-in-async
|
|
678
|
+
rulePath: ./rules/rust/rust.correctness.block-on-in-async.rule.yaml
|
|
679
|
+
presets:
|
|
680
|
+
- strict
|
|
681
|
+
- id: rust.correctness.forget-join-handle
|
|
682
|
+
rulePath: ./rules/rust/rust.correctness.forget-join-handle.rule.yaml
|
|
683
|
+
presets:
|
|
684
|
+
- strict
|
|
685
|
+
- id: rust.correctness.mutex-held-across-await
|
|
686
|
+
rulePath: ./rules/rust/rust.correctness.mutex-held-across-await.rule.yaml
|
|
687
|
+
presets:
|
|
688
|
+
- strict
|
|
689
|
+
- id: rust.correctness.std-mutex-in-async-fn
|
|
690
|
+
rulePath: ./rules/rust/rust.correctness.std-mutex-in-async-fn.rule.yaml
|
|
691
|
+
presets:
|
|
692
|
+
- strict
|
|
693
|
+
- id: rust.correctness.thread-sleep-in-async
|
|
694
|
+
rulePath: ./rules/rust/rust.correctness.thread-sleep-in-async.rule.yaml
|
|
695
|
+
presets:
|
|
696
|
+
- strict
|
|
697
|
+
- id: rust.correctness.unbounded-channel
|
|
698
|
+
rulePath: ./rules/rust/rust.correctness.unbounded-channel.rule.yaml
|
|
699
|
+
presets:
|
|
700
|
+
- strict
|
|
701
|
+
- id: rust.correctness.unchecked-index
|
|
702
|
+
rulePath: ./rules/rust/rust.correctness.unchecked-index.rule.yaml
|
|
703
|
+
presets:
|
|
704
|
+
- strict
|
|
437
705
|
- id: rust.performance.no-regex-construction-in-loop
|
|
438
706
|
rulePath: ./rules/rust/rust.performance.no-regex-construction-in-loop.rule.yaml
|
|
439
707
|
presets:
|
|
@@ -540,6 +808,52 @@ rules:
|
|
|
540
808
|
rulePath: ./rules/typescript/ts.react.no-deprecated-create-factory.rule.yaml
|
|
541
809
|
presets:
|
|
542
810
|
- strict
|
|
811
|
+
- id: ts.react.no-bind-in-jsx-props
|
|
812
|
+
rulePath: ./rules/typescript/ts.react.no-bind-in-jsx-props.rule.yaml
|
|
813
|
+
presets:
|
|
814
|
+
- recommended
|
|
815
|
+
- strict
|
|
816
|
+
- id: ts.react.no-jsx-props-spread
|
|
817
|
+
rulePath: ./rules/typescript/ts.react.no-jsx-props-spread.rule.yaml
|
|
818
|
+
presets:
|
|
819
|
+
- recommended
|
|
820
|
+
- strict
|
|
821
|
+
- id: ts.react.no-children-prop
|
|
822
|
+
rulePath: ./rules/typescript/ts.react.no-children-prop.rule.yaml
|
|
823
|
+
presets:
|
|
824
|
+
- recommended
|
|
825
|
+
- strict
|
|
826
|
+
- id: ts.react.no-set-state-in-component-did-mount
|
|
827
|
+
rulePath: ./rules/typescript/ts.react.no-set-state-in-component-did-mount.rule.yaml
|
|
828
|
+
presets:
|
|
829
|
+
- recommended
|
|
830
|
+
- strict
|
|
831
|
+
- id: ts.react.no-set-state-in-component-did-update
|
|
832
|
+
rulePath: ./rules/typescript/ts.react.no-set-state-in-component-did-update.rule.yaml
|
|
833
|
+
presets:
|
|
834
|
+
- recommended
|
|
835
|
+
- strict
|
|
836
|
+
- id: ts.react.no-direct-state-mutation
|
|
837
|
+
rulePath: ./rules/typescript/ts.react.no-direct-state-mutation.rule.yaml
|
|
838
|
+
presets:
|
|
839
|
+
- recommended
|
|
840
|
+
- strict
|
|
841
|
+
- id: ts.react.no-target-blank-without-rel
|
|
842
|
+
rulePath: ./rules/typescript/ts.react.no-target-blank-without-rel.rule.yaml
|
|
843
|
+
presets:
|
|
844
|
+
- recommended
|
|
845
|
+
- strict
|
|
846
|
+
- security
|
|
847
|
+
- id: ts.react.no-duplicate-jsx-attributes
|
|
848
|
+
rulePath: ./rules/typescript/ts.react.no-duplicate-jsx-attributes.rule.yaml
|
|
849
|
+
presets:
|
|
850
|
+
- recommended
|
|
851
|
+
- strict
|
|
852
|
+
- id: ts.react.no-this-in-function-component
|
|
853
|
+
rulePath: ./rules/typescript/ts.react.no-this-in-function-component.rule.yaml
|
|
854
|
+
presets:
|
|
855
|
+
- recommended
|
|
856
|
+
- strict
|
|
543
857
|
- id: security.no-sql-interpolation
|
|
544
858
|
rulePath: ./rules/shared/security.no-sql-interpolation.rule.yaml
|
|
545
859
|
presets:
|
|
@@ -552,6 +866,60 @@ rules:
|
|
|
552
866
|
- recommended
|
|
553
867
|
- strict
|
|
554
868
|
- security
|
|
869
|
+
- id: ts.security.no-with-statement
|
|
870
|
+
rulePath: ./rules/typescript/ts.security.no-with-statement.rule.yaml
|
|
871
|
+
presets:
|
|
872
|
+
- recommended
|
|
873
|
+
- strict
|
|
874
|
+
- security
|
|
875
|
+
- id: ts.security.no-arguments-callee
|
|
876
|
+
rulePath: ./rules/typescript/ts.security.no-arguments-callee.rule.yaml
|
|
877
|
+
presets:
|
|
878
|
+
- recommended
|
|
879
|
+
- strict
|
|
880
|
+
- security
|
|
881
|
+
- id: ts.security.no-javascript-url
|
|
882
|
+
rulePath: ./rules/typescript/ts.security.no-javascript-url.rule.yaml
|
|
883
|
+
presets:
|
|
884
|
+
- recommended
|
|
885
|
+
- strict
|
|
886
|
+
- security
|
|
887
|
+
- id: ts.security.no-native-prototype-extension
|
|
888
|
+
rulePath: ./rules/typescript/ts.security.no-native-prototype-extension.rule.yaml
|
|
889
|
+
presets:
|
|
890
|
+
- recommended
|
|
891
|
+
- strict
|
|
892
|
+
- security
|
|
893
|
+
- id: ts.security.no-global-native-reassignment
|
|
894
|
+
rulePath: ./rules/typescript/ts.security.no-global-native-reassignment.rule.yaml
|
|
895
|
+
presets:
|
|
896
|
+
- recommended
|
|
897
|
+
- strict
|
|
898
|
+
- security
|
|
899
|
+
- id: ts.security.no-throw-literal
|
|
900
|
+
rulePath: ./rules/typescript/ts.security.no-throw-literal.rule.yaml
|
|
901
|
+
presets:
|
|
902
|
+
- recommended
|
|
903
|
+
- strict
|
|
904
|
+
- security
|
|
905
|
+
- id: ts.security.no-alert-confirm-prompt
|
|
906
|
+
rulePath: ./rules/typescript/ts.security.no-alert-confirm-prompt.rule.yaml
|
|
907
|
+
presets:
|
|
908
|
+
- recommended
|
|
909
|
+
- strict
|
|
910
|
+
- security
|
|
911
|
+
- id: ts.runtime.no-process-exit
|
|
912
|
+
rulePath: ./rules/typescript/ts.runtime.no-process-exit.rule.yaml
|
|
913
|
+
presets:
|
|
914
|
+
- recommended
|
|
915
|
+
- strict
|
|
916
|
+
- security
|
|
917
|
+
- id: ts.security.unsafe-dirname-path-concat
|
|
918
|
+
rulePath: ./rules/typescript/ts.security.unsafe-dirname-path-concat.rule.yaml
|
|
919
|
+
presets:
|
|
920
|
+
- recommended
|
|
921
|
+
- strict
|
|
922
|
+
- security
|
|
555
923
|
- id: security.no-request-path-file-read
|
|
556
924
|
rulePath: ./rules/shared/security.no-request-path-file-read.rule.yaml
|
|
557
925
|
presets:
|
|
@@ -1013,6 +1381,28 @@ rules:
|
|
|
1013
1381
|
presets:
|
|
1014
1382
|
- strict
|
|
1015
1383
|
- security
|
|
1384
|
+
- id: ts.security.express-permissive-cors
|
|
1385
|
+
rulePath: ./rules/typescript/ts.security.express-permissive-cors.rule.yaml
|
|
1386
|
+
presets:
|
|
1387
|
+
- strict
|
|
1388
|
+
- security
|
|
1389
|
+
- id: ts.security.no-sync-child-process-exec
|
|
1390
|
+
rulePath: ./rules/typescript/ts.security.no-sync-child-process-exec.rule.yaml
|
|
1391
|
+
presets:
|
|
1392
|
+
- recommended
|
|
1393
|
+
- strict
|
|
1394
|
+
- security
|
|
1395
|
+
- id: ts.security.no-fs-readfile-sync-in-handler
|
|
1396
|
+
rulePath: ./rules/typescript/ts.security.no-fs-readfile-sync-in-handler.rule.yaml
|
|
1397
|
+
presets:
|
|
1398
|
+
- recommended
|
|
1399
|
+
- strict
|
|
1400
|
+
- security
|
|
1401
|
+
- id: ts.security.no-assign-mutable-export
|
|
1402
|
+
rulePath: ./rules/typescript/ts.security.no-assign-mutable-export.rule.yaml
|
|
1403
|
+
presets:
|
|
1404
|
+
- strict
|
|
1405
|
+
- security
|
|
1016
1406
|
- id: ts.security.request-driven-array-index-access
|
|
1017
1407
|
rulePath: ./rules/typescript/ts.security.request-driven-array-index-access.rule.yaml
|
|
1018
1408
|
presets:
|
|
@@ -1195,11 +1585,66 @@ rules:
|
|
|
1195
1585
|
presets:
|
|
1196
1586
|
- strict
|
|
1197
1587
|
- security
|
|
1588
|
+
- id: py.security.flask-debug-enabled
|
|
1589
|
+
rulePath: ./rules/python/py.security.flask-debug-enabled.rule.yaml
|
|
1590
|
+
presets:
|
|
1591
|
+
- strict
|
|
1592
|
+
- security
|
|
1593
|
+
- id: py.security.django-mark-safe
|
|
1594
|
+
rulePath: ./rules/python/py.security.django-mark-safe.rule.yaml
|
|
1595
|
+
presets:
|
|
1596
|
+
- strict
|
|
1597
|
+
- security
|
|
1598
|
+
- id: py.security.django-format-html-unsafe
|
|
1599
|
+
rulePath: ./rules/python/py.security.django-format-html-unsafe.rule.yaml
|
|
1600
|
+
presets:
|
|
1601
|
+
- strict
|
|
1602
|
+
- security
|
|
1603
|
+
- id: py.security.django-security-middleware-missing
|
|
1604
|
+
rulePath: ./rules/python/py.security.django-security-middleware-missing.rule.yaml
|
|
1605
|
+
presets:
|
|
1606
|
+
- strict
|
|
1607
|
+
- security
|
|
1198
1608
|
- id: py.security.fastapi-insecure-cors
|
|
1199
1609
|
rulePath: ./rules/python/py.security.fastapi-insecure-cors.rule.yaml
|
|
1200
1610
|
presets:
|
|
1201
1611
|
- strict
|
|
1202
1612
|
- security
|
|
1613
|
+
- id: py.security.subprocess-shell-enabled
|
|
1614
|
+
rulePath: ./rules/python/py.security.subprocess-shell-enabled.rule.yaml
|
|
1615
|
+
presets:
|
|
1616
|
+
- strict
|
|
1617
|
+
- security
|
|
1618
|
+
- id: py.security.dynamic-code-execution
|
|
1619
|
+
rulePath: ./rules/python/py.security.dynamic-code-execution.rule.yaml
|
|
1620
|
+
presets:
|
|
1621
|
+
- strict
|
|
1622
|
+
- security
|
|
1623
|
+
- id: py.security.insecure-yaml-load
|
|
1624
|
+
rulePath: ./rules/python/py.security.insecure-yaml-load.rule.yaml
|
|
1625
|
+
presets:
|
|
1626
|
+
- strict
|
|
1627
|
+
- security
|
|
1628
|
+
- id: py.security.insecure-temp-file
|
|
1629
|
+
rulePath: ./rules/python/py.security.insecure-temp-file.rule.yaml
|
|
1630
|
+
presets:
|
|
1631
|
+
- strict
|
|
1632
|
+
- security
|
|
1633
|
+
- id: py.security.bind-all-interfaces
|
|
1634
|
+
rulePath: ./rules/python/py.security.bind-all-interfaces.rule.yaml
|
|
1635
|
+
presets:
|
|
1636
|
+
- strict
|
|
1637
|
+
- security
|
|
1638
|
+
- id: py.security.debugger-import
|
|
1639
|
+
rulePath: ./rules/python/py.security.debugger-import.rule.yaml
|
|
1640
|
+
presets:
|
|
1641
|
+
- strict
|
|
1642
|
+
- security
|
|
1643
|
+
- id: py.security.jinja-autoescape-disabled
|
|
1644
|
+
rulePath: ./rules/python/py.security.jinja-autoescape-disabled.rule.yaml
|
|
1645
|
+
presets:
|
|
1646
|
+
- strict
|
|
1647
|
+
- security
|
|
1203
1648
|
- id: java.security.android-screenshot-exposure
|
|
1204
1649
|
rulePath: ./rules/java/java.security.android-screenshot-exposure.rule.yaml
|
|
1205
1650
|
presets:
|
|
@@ -1263,6 +1708,149 @@ rules:
|
|
|
1263
1708
|
presets:
|
|
1264
1709
|
- strict
|
|
1265
1710
|
- security
|
|
1711
|
+
- id: java.security.unsafe-jackson-deserialization
|
|
1712
|
+
rulePath: ./rules/java/java.security.unsafe-jackson-deserialization.rule.yaml
|
|
1713
|
+
presets:
|
|
1714
|
+
- strict
|
|
1715
|
+
- security
|
|
1716
|
+
- id: java.security.xxe-document-builder
|
|
1717
|
+
rulePath: ./rules/java/java.security.xxe-document-builder.rule.yaml
|
|
1718
|
+
presets:
|
|
1719
|
+
- strict
|
|
1720
|
+
- security
|
|
1721
|
+
- id: java.security.xxe-xml-input-factory
|
|
1722
|
+
rulePath: ./rules/java/java.security.xxe-xml-input-factory.rule.yaml
|
|
1723
|
+
presets:
|
|
1724
|
+
- strict
|
|
1725
|
+
- security
|
|
1726
|
+
- id: java.security.hibernate-sql-concatenation
|
|
1727
|
+
rulePath: ./rules/java/java.security.hibernate-sql-concatenation.rule.yaml
|
|
1728
|
+
presets:
|
|
1729
|
+
- strict
|
|
1730
|
+
- security
|
|
1731
|
+
- id: java.security.shell-runtime-exec
|
|
1732
|
+
rulePath: ./rules/java/java.security.shell-runtime-exec.rule.yaml
|
|
1733
|
+
presets:
|
|
1734
|
+
- strict
|
|
1735
|
+
- security
|
|
1736
|
+
- id: java.security.predictable-securerandom
|
|
1737
|
+
rulePath: ./rules/java/java.security.predictable-securerandom.rule.yaml
|
|
1738
|
+
presets:
|
|
1739
|
+
- strict
|
|
1740
|
+
- security
|
|
1741
|
+
- id: java.correctness.empty-catch
|
|
1742
|
+
rulePath: ./rules/java/java.correctness.empty-catch.rule.yaml
|
|
1743
|
+
presets:
|
|
1744
|
+
- strict
|
|
1745
|
+
- id: java.correctness.equals-on-array
|
|
1746
|
+
rulePath: ./rules/java/java.correctness.equals-on-array.rule.yaml
|
|
1747
|
+
presets:
|
|
1748
|
+
- strict
|
|
1749
|
+
- id: java.correctness.sync-on-string-literal
|
|
1750
|
+
rulePath: ./rules/java/java.correctness.sync-on-string-literal.rule.yaml
|
|
1751
|
+
presets:
|
|
1752
|
+
- strict
|
|
1753
|
+
- id: java.correctness.catch-null-pointer
|
|
1754
|
+
rulePath: ./rules/java/java.correctness.catch-null-pointer.rule.yaml
|
|
1755
|
+
presets:
|
|
1756
|
+
- strict
|
|
1757
|
+
- id: java.correctness.unsafe-optional-get
|
|
1758
|
+
rulePath: ./rules/java/java.correctness.unsafe-optional-get.rule.yaml
|
|
1759
|
+
presets:
|
|
1760
|
+
- strict
|
|
1761
|
+
- id: java.correctness.return-in-finally
|
|
1762
|
+
rulePath: ./rules/java/java.correctness.return-in-finally.rule.yaml
|
|
1763
|
+
presets:
|
|
1764
|
+
- strict
|
|
1765
|
+
- id: java.security.insecure-cipher-mode
|
|
1766
|
+
rulePath: ./rules/java/java.security.insecure-cipher-mode.rule.yaml
|
|
1767
|
+
presets:
|
|
1768
|
+
- strict
|
|
1769
|
+
- security
|
|
1770
|
+
- id: java.security.weak-rsa-key-size
|
|
1771
|
+
rulePath: ./rules/java/java.security.weak-rsa-key-size.rule.yaml
|
|
1772
|
+
presets:
|
|
1773
|
+
- strict
|
|
1774
|
+
- security
|
|
1775
|
+
- id: java.security.insecure-ssl-context
|
|
1776
|
+
rulePath: ./rules/java/java.security.insecure-ssl-context.rule.yaml
|
|
1777
|
+
presets:
|
|
1778
|
+
- strict
|
|
1779
|
+
- security
|
|
1780
|
+
- id: java.security.permissive-cors
|
|
1781
|
+
rulePath: ./rules/java/java.security.permissive-cors.rule.yaml
|
|
1782
|
+
presets:
|
|
1783
|
+
- strict
|
|
1784
|
+
- security
|
|
1785
|
+
- id: java.security.trust-all-certificates
|
|
1786
|
+
rulePath: ./rules/java/java.security.trust-all-certificates.rule.yaml
|
|
1787
|
+
presets:
|
|
1788
|
+
- strict
|
|
1789
|
+
- security
|
|
1790
|
+
- id: java.security.insecure-network-protocol
|
|
1791
|
+
rulePath: ./rules/java/java.security.insecure-network-protocol.rule.yaml
|
|
1792
|
+
presets:
|
|
1793
|
+
- strict
|
|
1794
|
+
- security
|
|
1795
|
+
- id: java.security.null-cipher
|
|
1796
|
+
rulePath: ./rules/java/java.security.null-cipher.rule.yaml
|
|
1797
|
+
presets:
|
|
1798
|
+
- strict
|
|
1799
|
+
- security
|
|
1800
|
+
- id: java.security.jwt-without-verification
|
|
1801
|
+
rulePath: ./rules/java/java.security.jwt-without-verification.rule.yaml
|
|
1802
|
+
presets:
|
|
1803
|
+
- strict
|
|
1804
|
+
- security
|
|
1805
|
+
- id: ruby.bug-risk.assignment-in-condition
|
|
1806
|
+
rulePath: ./rules/ruby/ruby.bug-risk.assignment-in-condition.rule.yaml
|
|
1807
|
+
presets:
|
|
1808
|
+
- strict
|
|
1809
|
+
- id: ruby.bug-risk.deprecated-uri-escape
|
|
1810
|
+
rulePath: ./rules/ruby/ruby.bug-risk.deprecated-uri-escape.rule.yaml
|
|
1811
|
+
presets:
|
|
1812
|
+
- strict
|
|
1813
|
+
- id: ruby.bug-risk.division-by-zero
|
|
1814
|
+
rulePath: ./rules/ruby/ruby.bug-risk.division-by-zero.rule.yaml
|
|
1815
|
+
presets:
|
|
1816
|
+
- strict
|
|
1817
|
+
- id: ruby.bug-risk.duplicate-hash-keys
|
|
1818
|
+
rulePath: ./rules/ruby/ruby.bug-risk.duplicate-hash-keys.rule.yaml
|
|
1819
|
+
presets:
|
|
1820
|
+
- strict
|
|
1821
|
+
- id: ruby.bug-risk.exception-class-overwritten
|
|
1822
|
+
rulePath: ./rules/ruby/ruby.bug-risk.exception-class-overwritten.rule.yaml
|
|
1823
|
+
presets:
|
|
1824
|
+
- strict
|
|
1825
|
+
- id: ruby.bug-risk.raw-sql-without-squish
|
|
1826
|
+
rulePath: ./rules/ruby/ruby.bug-risk.raw-sql-without-squish.rule.yaml
|
|
1827
|
+
presets:
|
|
1828
|
+
- strict
|
|
1829
|
+
- id: ruby.security.debugger-call
|
|
1830
|
+
rulePath: ./rules/ruby/ruby.security.debugger-call.rule.yaml
|
|
1831
|
+
presets:
|
|
1832
|
+
- strict
|
|
1833
|
+
- security
|
|
1834
|
+
- id: ruby.security.dynamic-code-execution
|
|
1835
|
+
rulePath: ./rules/ruby/ruby.security.dynamic-code-execution.rule.yaml
|
|
1836
|
+
presets:
|
|
1837
|
+
- strict
|
|
1838
|
+
- security
|
|
1839
|
+
- id: ruby.security.insecure-json-load
|
|
1840
|
+
rulePath: ./rules/ruby/ruby.security.insecure-json-load.rule.yaml
|
|
1841
|
+
presets:
|
|
1842
|
+
- strict
|
|
1843
|
+
- security
|
|
1844
|
+
- id: ruby.security.kernel-open
|
|
1845
|
+
rulePath: ./rules/ruby/ruby.security.kernel-open.rule.yaml
|
|
1846
|
+
presets:
|
|
1847
|
+
- strict
|
|
1848
|
+
- security
|
|
1849
|
+
- id: ruby.security.plaintext-password-in-callback
|
|
1850
|
+
rulePath: ./rules/ruby/ruby.security.plaintext-password-in-callback.rule.yaml
|
|
1851
|
+
presets:
|
|
1852
|
+
- strict
|
|
1853
|
+
- security
|
|
1266
1854
|
- id: ruby.security.rails-csrf-disabled
|
|
1267
1855
|
rulePath: ./rules/ruby/ruby.security.rails-csrf-disabled.rule.yaml
|
|
1268
1856
|
presets:
|
|
@@ -1273,11 +1861,21 @@ rules:
|
|
|
1273
1861
|
presets:
|
|
1274
1862
|
- strict
|
|
1275
1863
|
- security
|
|
1864
|
+
- id: ruby.security.rails-link-to-blank-without-noopener
|
|
1865
|
+
rulePath: ./rules/ruby/ruby.security.rails-link-to-blank-without-noopener.rule.yaml
|
|
1866
|
+
presets:
|
|
1867
|
+
- strict
|
|
1868
|
+
- security
|
|
1276
1869
|
- id: ruby.security.rails-open-redirect
|
|
1277
1870
|
rulePath: ./rules/ruby/ruby.security.rails-open-redirect.rule.yaml
|
|
1278
1871
|
presets:
|
|
1279
1872
|
- strict
|
|
1280
1873
|
- security
|
|
1874
|
+
- id: ruby.security.rails-output-unsafe
|
|
1875
|
+
rulePath: ./rules/ruby/ruby.security.rails-output-unsafe.rule.yaml
|
|
1876
|
+
presets:
|
|
1877
|
+
- strict
|
|
1878
|
+
- security
|
|
1281
1879
|
- id: ruby.security.rails-unsafe-html-output
|
|
1282
1880
|
rulePath: ./rules/ruby/ruby.security.rails-unsafe-html-output.rule.yaml
|
|
1283
1881
|
presets:
|
|
@@ -1323,6 +1921,41 @@ rules:
|
|
|
1323
1921
|
presets:
|
|
1324
1922
|
- strict
|
|
1325
1923
|
- security
|
|
1924
|
+
- id: rust.security.bind-all-interfaces
|
|
1925
|
+
rulePath: ./rules/rust/rust.security.bind-all-interfaces.rule.yaml
|
|
1926
|
+
presets:
|
|
1927
|
+
- strict
|
|
1928
|
+
- security
|
|
1929
|
+
- id: rust.security.insecure-ssh-host-key
|
|
1930
|
+
rulePath: ./rules/rust/rust.security.insecure-ssh-host-key.rule.yaml
|
|
1931
|
+
presets:
|
|
1932
|
+
- strict
|
|
1933
|
+
- security
|
|
1934
|
+
- id: rust.security.insecure-ssl-protocol
|
|
1935
|
+
rulePath: ./rules/rust/rust.security.insecure-ssl-protocol.rule.yaml
|
|
1936
|
+
presets:
|
|
1937
|
+
- strict
|
|
1938
|
+
- security
|
|
1939
|
+
- id: rust.security.insecure-temp-file
|
|
1940
|
+
rulePath: ./rules/rust/rust.security.insecure-temp-file.rule.yaml
|
|
1941
|
+
presets:
|
|
1942
|
+
- strict
|
|
1943
|
+
- security
|
|
1944
|
+
- id: rust.security.insecure-yaml-load
|
|
1945
|
+
rulePath: ./rules/rust/rust.security.insecure-yaml-load.rule.yaml
|
|
1946
|
+
presets:
|
|
1947
|
+
- strict
|
|
1948
|
+
- security
|
|
1949
|
+
- id: rust.security.jwt-without-verification
|
|
1950
|
+
rulePath: ./rules/rust/rust.security.jwt-without-verification.rule.yaml
|
|
1951
|
+
presets:
|
|
1952
|
+
- strict
|
|
1953
|
+
- security
|
|
1954
|
+
- id: rust.security.panic-in-async-handler
|
|
1955
|
+
rulePath: ./rules/rust/rust.security.panic-in-async-handler.rule.yaml
|
|
1956
|
+
presets:
|
|
1957
|
+
- strict
|
|
1958
|
+
- security
|
|
1326
1959
|
- id: rust.security.rocket-panic-prone-request-handler
|
|
1327
1960
|
rulePath: ./rules/rust/rust.security.rocket-panic-prone-request-handler.rule.yaml
|
|
1328
1961
|
presets:
|
|
@@ -1333,6 +1966,11 @@ rules:
|
|
|
1333
1966
|
presets:
|
|
1334
1967
|
- strict
|
|
1335
1968
|
- security
|
|
1969
|
+
- id: rust.security.shell-command-spawn
|
|
1970
|
+
rulePath: ./rules/rust/rust.security.shell-command-spawn.rule.yaml
|
|
1971
|
+
presets:
|
|
1972
|
+
- strict
|
|
1973
|
+
- security
|
|
1336
1974
|
- id: rust.security.sqlx-diesel-raw-interpolated-query
|
|
1337
1975
|
rulePath: ./rules/rust/rust.security.sqlx-diesel-raw-interpolated-query.rule.yaml
|
|
1338
1976
|
presets:
|
|
@@ -1343,11 +1981,31 @@ rules:
|
|
|
1343
1981
|
presets:
|
|
1344
1982
|
- strict
|
|
1345
1983
|
- security
|
|
1984
|
+
- id: rust.security.tls-missing-min-version
|
|
1985
|
+
rulePath: ./rules/rust/rust.security.tls-missing-min-version.rule.yaml
|
|
1986
|
+
presets:
|
|
1987
|
+
- strict
|
|
1988
|
+
- security
|
|
1346
1989
|
- id: rust.security.warp-blocking-or-panic-in-async-handler
|
|
1347
1990
|
rulePath: ./rules/rust/rust.security.warp-blocking-or-panic-in-async-handler.rule.yaml
|
|
1348
1991
|
presets:
|
|
1349
1992
|
- strict
|
|
1350
1993
|
- security
|
|
1994
|
+
- id: rust.security.weak-crypto-import
|
|
1995
|
+
rulePath: ./rules/rust/rust.security.weak-crypto-import.rule.yaml
|
|
1996
|
+
presets:
|
|
1997
|
+
- strict
|
|
1998
|
+
- security
|
|
1999
|
+
- id: rust.security.weak-rsa-key-size
|
|
2000
|
+
rulePath: ./rules/rust/rust.security.weak-rsa-key-size.rule.yaml
|
|
2001
|
+
presets:
|
|
2002
|
+
- strict
|
|
2003
|
+
- security
|
|
2004
|
+
- id: rust.security.weak-tls-cipher
|
|
2005
|
+
rulePath: ./rules/rust/rust.security.weak-tls-cipher.rule.yaml
|
|
2006
|
+
presets:
|
|
2007
|
+
- strict
|
|
2008
|
+
- security
|
|
1351
2009
|
- id: go.testing.t-skip-without-ticket-reference
|
|
1352
2010
|
rulePath: ./rules/go/go.testing.t-skip-without-ticket-reference.rule.yaml
|
|
1353
2011
|
presets:
|
|
@@ -1483,11 +2141,31 @@ rules:
|
|
|
1483
2141
|
presets:
|
|
1484
2142
|
- strict
|
|
1485
2143
|
- security
|
|
2144
|
+
- id: go.security.insecure-rand-seed
|
|
2145
|
+
rulePath: ./rules/go/go.security.insecure-rand-seed.rule.yaml
|
|
2146
|
+
presets:
|
|
2147
|
+
- strict
|
|
2148
|
+
- security
|
|
2149
|
+
- id: go.security.insecure-ssl-protocol
|
|
2150
|
+
rulePath: ./rules/go/go.security.insecure-ssl-protocol.rule.yaml
|
|
2151
|
+
presets:
|
|
2152
|
+
- strict
|
|
2153
|
+
- security
|
|
2154
|
+
- id: go.security.jwt-without-verification
|
|
2155
|
+
rulePath: ./rules/go/go.security.jwt-without-verification.rule.yaml
|
|
2156
|
+
presets:
|
|
2157
|
+
- strict
|
|
2158
|
+
- security
|
|
1486
2159
|
- id: go.security.net-http-missing-timeouts
|
|
1487
2160
|
rulePath: ./rules/go/go.security.net-http-missing-timeouts.rule.yaml
|
|
1488
2161
|
presets:
|
|
1489
2162
|
- strict
|
|
1490
2163
|
- security
|
|
2164
|
+
- id: go.security.pprof-exposed
|
|
2165
|
+
rulePath: ./rules/go/go.security.pprof-exposed.rule.yaml
|
|
2166
|
+
presets:
|
|
2167
|
+
- strict
|
|
2168
|
+
- security
|
|
1491
2169
|
- id: go.security.sensitive-data-egress
|
|
1492
2170
|
rulePath: ./rules/go/go.security.sensitive-data-egress.rule.yaml
|
|
1493
2171
|
presets:
|
|
@@ -1503,6 +2181,79 @@ rules:
|
|
|
1503
2181
|
presets:
|
|
1504
2182
|
- strict
|
|
1505
2183
|
- security
|
|
2184
|
+
- id: go.security.bind-all-interfaces
|
|
2185
|
+
rulePath: ./rules/go/go.security.bind-all-interfaces.rule.yaml
|
|
2186
|
+
presets:
|
|
2187
|
+
- strict
|
|
2188
|
+
- security
|
|
2189
|
+
- id: go.security.unsafe-package-import
|
|
2190
|
+
rulePath: ./rules/go/go.security.unsafe-package-import.rule.yaml
|
|
2191
|
+
presets:
|
|
2192
|
+
- strict
|
|
2193
|
+
- security
|
|
2194
|
+
- id: go.security.insecure-ssh-host-key
|
|
2195
|
+
rulePath: ./rules/go/go.security.insecure-ssh-host-key.rule.yaml
|
|
2196
|
+
presets:
|
|
2197
|
+
- strict
|
|
2198
|
+
- security
|
|
2199
|
+
- id: go.security.insecure-temp-file
|
|
2200
|
+
rulePath: ./rules/go/go.security.insecure-temp-file.rule.yaml
|
|
2201
|
+
presets:
|
|
2202
|
+
- strict
|
|
2203
|
+
- security
|
|
2204
|
+
- id: go.security.weak-rsa-key-size
|
|
2205
|
+
rulePath: ./rules/go/go.security.weak-rsa-key-size.rule.yaml
|
|
2206
|
+
presets:
|
|
2207
|
+
- strict
|
|
2208
|
+
- security
|
|
2209
|
+
- id: go.security.weak-crypto-import
|
|
2210
|
+
rulePath: ./rules/go/go.security.weak-crypto-import.rule.yaml
|
|
2211
|
+
presets:
|
|
2212
|
+
- strict
|
|
2213
|
+
- security
|
|
2214
|
+
- id: go.security.tls-missing-min-version
|
|
2215
|
+
rulePath: ./rules/go/go.security.tls-missing-min-version.rule.yaml
|
|
2216
|
+
presets:
|
|
2217
|
+
- strict
|
|
2218
|
+
- security
|
|
2219
|
+
- id: go.security.weak-bcrypt-cost
|
|
2220
|
+
rulePath: ./rules/go/go.security.weak-bcrypt-cost.rule.yaml
|
|
2221
|
+
presets:
|
|
2222
|
+
- strict
|
|
2223
|
+
- security
|
|
2224
|
+
- id: go.security.weak-tls-cipher
|
|
2225
|
+
rulePath: ./rules/go/go.security.weak-tls-cipher.rule.yaml
|
|
2226
|
+
presets:
|
|
2227
|
+
- strict
|
|
2228
|
+
- security
|
|
2229
|
+
- id: go.correctness.defer-close-before-check
|
|
2230
|
+
rulePath: ./rules/go/go.correctness.defer-close-before-check.rule.yaml
|
|
2231
|
+
presets:
|
|
2232
|
+
- strict
|
|
2233
|
+
- id: go.correctness.defer-in-loop
|
|
2234
|
+
rulePath: ./rules/go/go.correctness.defer-in-loop.rule.yaml
|
|
2235
|
+
presets:
|
|
2236
|
+
- strict
|
|
2237
|
+
- id: go.correctness.nil-context-passed
|
|
2238
|
+
rulePath: ./rules/go/go.correctness.nil-context-passed.rule.yaml
|
|
2239
|
+
presets:
|
|
2240
|
+
- strict
|
|
2241
|
+
- id: go.correctness.nil-map-assignment
|
|
2242
|
+
rulePath: ./rules/go/go.correctness.nil-map-assignment.rule.yaml
|
|
2243
|
+
presets:
|
|
2244
|
+
- strict
|
|
2245
|
+
- id: go.correctness.time-tick-leak
|
|
2246
|
+
rulePath: ./rules/go/go.correctness.time-tick-leak.rule.yaml
|
|
2247
|
+
presets:
|
|
2248
|
+
- strict
|
|
2249
|
+
- id: go.correctness.unused-append-result
|
|
2250
|
+
rulePath: ./rules/go/go.correctness.unused-append-result.rule.yaml
|
|
2251
|
+
presets:
|
|
2252
|
+
- strict
|
|
2253
|
+
- id: go.correctness.waitgroup-add-in-goroutine
|
|
2254
|
+
rulePath: ./rules/go/go.correctness.waitgroup-add-in-goroutine.rule.yaml
|
|
2255
|
+
presets:
|
|
2256
|
+
- strict
|
|
1506
2257
|
- id: php.security.insecure-cors-wildcard-with-credentials
|
|
1507
2258
|
rulePath: ./rules/php/php.security.insecure-cors-wildcard-with-credentials.rule.yaml
|
|
1508
2259
|
presets:
|
|
@@ -1518,6 +2269,36 @@ rules:
|
|
|
1518
2269
|
presets:
|
|
1519
2270
|
- strict
|
|
1520
2271
|
- security
|
|
2272
|
+
- id: php.security.debug-function-exposure
|
|
2273
|
+
rulePath: ./rules/php/php.security.debug-function-exposure.rule.yaml
|
|
2274
|
+
presets:
|
|
2275
|
+
- strict
|
|
2276
|
+
- security
|
|
2277
|
+
- id: php.security.insecure-session-id-generation
|
|
2278
|
+
rulePath: ./rules/php/php.security.insecure-session-id-generation.rule.yaml
|
|
2279
|
+
presets:
|
|
2280
|
+
- strict
|
|
2281
|
+
- security
|
|
2282
|
+
- id: php.security.no-dynamic-eval
|
|
2283
|
+
rulePath: ./rules/php/php.security.no-dynamic-eval.rule.yaml
|
|
2284
|
+
presets:
|
|
2285
|
+
- strict
|
|
2286
|
+
- security
|
|
2287
|
+
- id: php.security.unsafe-include-with-user-input
|
|
2288
|
+
rulePath: ./rules/php/php.security.unsafe-include-with-user-input.rule.yaml
|
|
2289
|
+
presets:
|
|
2290
|
+
- strict
|
|
2291
|
+
- security
|
|
2292
|
+
- id: php.security.weak-cipher
|
|
2293
|
+
rulePath: ./rules/php/php.security.weak-cipher.rule.yaml
|
|
2294
|
+
presets:
|
|
2295
|
+
- strict
|
|
2296
|
+
- security
|
|
2297
|
+
- id: php.security.xml-external-entity
|
|
2298
|
+
rulePath: ./rules/php/php.security.xml-external-entity.rule.yaml
|
|
2299
|
+
presets:
|
|
2300
|
+
- strict
|
|
2301
|
+
- security
|
|
1521
2302
|
- id: php.security.laravel-sensitive-csrf-exclusion
|
|
1522
2303
|
rulePath: ./rules/php/php.security.laravel-sensitive-csrf-exclusion.rule.yaml
|
|
1523
2304
|
presets:
|
|
@@ -1563,3 +2344,637 @@ rules:
|
|
|
1563
2344
|
presets:
|
|
1564
2345
|
- strict
|
|
1565
2346
|
- security
|
|
2347
|
+
- id: cfn.correctness.error-processing-rule-on-the-template
|
|
2348
|
+
rulePath: ./rules/cfn/cfn.correctness.error-processing-rule-on-the-template.rule.yaml
|
|
2349
|
+
presets:
|
|
2350
|
+
- strict
|
|
2351
|
+
- id: cfn.correctness.basic-cloudformation-template-configuration
|
|
2352
|
+
rulePath: ./rules/cfn/cfn.correctness.basic-cloudformation-template-configuration.rule.yaml
|
|
2353
|
+
presets:
|
|
2354
|
+
- strict
|
|
2355
|
+
- id: cfn.correctness.template-size-limit
|
|
2356
|
+
rulePath: ./rules/cfn/cfn.correctness.template-size-limit.rule.yaml
|
|
2357
|
+
presets:
|
|
2358
|
+
- strict
|
|
2359
|
+
- id: cfn.correctness.template-description-limit
|
|
2360
|
+
rulePath: ./rules/cfn/cfn.correctness.template-description-limit.rule.yaml
|
|
2361
|
+
presets:
|
|
2362
|
+
- strict
|
|
2363
|
+
- id: cfn.correctness.template-description-can-only-be-a-string
|
|
2364
|
+
rulePath: ./rules/cfn/cfn.correctness.template-description-can-only-be-a-string.rule.yaml
|
|
2365
|
+
presets:
|
|
2366
|
+
- strict
|
|
2367
|
+
- id: cfn.correctness.getatt-validation-of-parameters
|
|
2368
|
+
rulePath: ./rules/cfn/cfn.correctness.getatt-validation-of-parameters.rule.yaml
|
|
2369
|
+
presets:
|
|
2370
|
+
- strict
|
|
2371
|
+
- id: cfn.correctness.findinmap-validation-of-configuration
|
|
2372
|
+
rulePath: ./rules/cfn/cfn.correctness.findinmap-validation-of-configuration.rule.yaml
|
|
2373
|
+
presets:
|
|
2374
|
+
- strict
|
|
2375
|
+
- id: cfn.correctness.check-if-refs-exist
|
|
2376
|
+
rulePath: ./rules/cfn/cfn.correctness.check-if-refs-exist.rule.yaml
|
|
2377
|
+
presets:
|
|
2378
|
+
- strict
|
|
2379
|
+
- id: cfn.correctness.getaz-validation-of-parameters
|
|
2380
|
+
rulePath: ./rules/cfn/cfn.correctness.getaz-validation-of-parameters.rule.yaml
|
|
2381
|
+
presets:
|
|
2382
|
+
- strict
|
|
2383
|
+
- id: cfn.correctness.importvalue-validation-of-parameters
|
|
2384
|
+
rulePath: ./rules/cfn/cfn.correctness.importvalue-validation-of-parameters.rule.yaml
|
|
2385
|
+
presets:
|
|
2386
|
+
- strict
|
|
2387
|
+
- id: cfn.correctness.select-validation-of-parameters
|
|
2388
|
+
rulePath: ./rules/cfn/cfn.correctness.select-validation-of-parameters.rule.yaml
|
|
2389
|
+
presets:
|
|
2390
|
+
- strict
|
|
2391
|
+
- id: cfn.correctness.split-validation-of-parameters
|
|
2392
|
+
rulePath: ./rules/cfn/cfn.correctness.split-validation-of-parameters.rule.yaml
|
|
2393
|
+
presets:
|
|
2394
|
+
- strict
|
|
2395
|
+
- id: cfn.correctness.sub-validation-of-parameters
|
|
2396
|
+
rulePath: ./rules/cfn/cfn.correctness.sub-validation-of-parameters.rule.yaml
|
|
2397
|
+
presets:
|
|
2398
|
+
- strict
|
|
2399
|
+
- id: cfn.correctness.ref-validation-of-value
|
|
2400
|
+
rulePath: ./rules/cfn/cfn.correctness.ref-validation-of-value.rule.yaml
|
|
2401
|
+
presets:
|
|
2402
|
+
- strict
|
|
2403
|
+
- id: cfn.correctness.base64-validation-of-parameters
|
|
2404
|
+
rulePath: ./rules/cfn/cfn.correctness.base64-validation-of-parameters.rule.yaml
|
|
2405
|
+
presets:
|
|
2406
|
+
- strict
|
|
2407
|
+
- id: cfn.correctness.join-validation-of-parameters
|
|
2408
|
+
rulePath: ./rules/cfn/cfn.correctness.join-validation-of-parameters.rule.yaml
|
|
2409
|
+
presets:
|
|
2410
|
+
- strict
|
|
2411
|
+
- id: cfn.correctness.validation-not-function-configuration
|
|
2412
|
+
rulePath: ./rules/cfn/cfn.correctness.validation-not-function-configuration.rule.yaml
|
|
2413
|
+
presets:
|
|
2414
|
+
- strict
|
|
2415
|
+
- id: cfn.correctness.cidr-validation-of-parameters
|
|
2416
|
+
rulePath: ./rules/cfn/cfn.correctness.cidr-validation-of-parameters.rule.yaml
|
|
2417
|
+
presets:
|
|
2418
|
+
- strict
|
|
2419
|
+
- id: cfn.correctness.cannot-reference-resources-in-the-conditions-block-of-the-template
|
|
2420
|
+
rulePath: ./rules/cfn/cfn.correctness.cannot-reference-resources-in-the-conditions-block-of-the-template.rule.yaml
|
|
2421
|
+
presets:
|
|
2422
|
+
- strict
|
|
2423
|
+
- id: cfn.security.check-dynamic-references-secure-strings-are-in-supported-locations
|
|
2424
|
+
rulePath: ./rules/cfn/cfn.security.check-dynamic-references-secure-strings-are-in-supported-locations.rule.yaml
|
|
2425
|
+
presets:
|
|
2426
|
+
- strict
|
|
2427
|
+
- security
|
|
2428
|
+
- id: cfn.correctness.check-fn-if-structure-for-validity
|
|
2429
|
+
rulePath: ./rules/cfn/cfn.correctness.check-fn-if-structure-for-validity.rule.yaml
|
|
2430
|
+
presets:
|
|
2431
|
+
- strict
|
|
2432
|
+
- id: cfn.correctness.sub-is-required-if-a-variable-is-used-in-a-string
|
|
2433
|
+
rulePath: ./rules/cfn/cfn.correctness.sub-is-required-if-a-variable-is-used-in-a-string.rule.yaml
|
|
2434
|
+
presets:
|
|
2435
|
+
- strict
|
|
2436
|
+
- id: cfn.correctness.length-validation-of-parameters
|
|
2437
|
+
rulePath: ./rules/cfn/cfn.correctness.length-validation-of-parameters.rule.yaml
|
|
2438
|
+
presets:
|
|
2439
|
+
- strict
|
|
2440
|
+
- id: cfn.correctness.tojsonstring-validation-of-parameters
|
|
2441
|
+
rulePath: ./rules/cfn/cfn.correctness.tojsonstring-validation-of-parameters.rule.yaml
|
|
2442
|
+
presets:
|
|
2443
|
+
- strict
|
|
2444
|
+
- id: cfn.correctness.validates-foreach-functions
|
|
2445
|
+
rulePath: ./rules/cfn/cfn.correctness.validates-foreach-functions.rule.yaml
|
|
2446
|
+
presets:
|
|
2447
|
+
- strict
|
|
2448
|
+
- id: cfn.correctness.parameters-have-appropriate-properties
|
|
2449
|
+
rulePath: ./rules/cfn/cfn.correctness.parameters-have-appropriate-properties.rule.yaml
|
|
2450
|
+
presets:
|
|
2451
|
+
- strict
|
|
2452
|
+
- id: cfn.correctness.parameters-have-appropriate-type
|
|
2453
|
+
rulePath: ./rules/cfn/cfn.correctness.parameters-have-appropriate-type.rule.yaml
|
|
2454
|
+
presets:
|
|
2455
|
+
- strict
|
|
2456
|
+
- id: cfn.correctness.parameters-have-appropriate-names
|
|
2457
|
+
rulePath: ./rules/cfn/cfn.correctness.parameters-have-appropriate-names.rule.yaml
|
|
2458
|
+
presets:
|
|
2459
|
+
- strict
|
|
2460
|
+
- id: cfn.correctness.parameter-limit-not-exceeded
|
|
2461
|
+
rulePath: ./rules/cfn/cfn.correctness.parameter-limit-not-exceeded.rule.yaml
|
|
2462
|
+
presets:
|
|
2463
|
+
- strict
|
|
2464
|
+
- id: cfn.correctness.parameter-name-limit-not-exceeded
|
|
2465
|
+
rulePath: ./rules/cfn/cfn.correctness.parameter-name-limit-not-exceeded.rule.yaml
|
|
2466
|
+
presets:
|
|
2467
|
+
- strict
|
|
2468
|
+
- id: cfn.correctness.parameter-value-limit-not-exceeded
|
|
2469
|
+
rulePath: ./rules/cfn/cfn.correctness.parameter-value-limit-not-exceeded.rule.yaml
|
|
2470
|
+
presets:
|
|
2471
|
+
- strict
|
|
2472
|
+
- id: cfn.correctness.default-value-cannot-use-refs
|
|
2473
|
+
rulePath: ./rules/cfn/cfn.correctness.default-value-cannot-use-refs.rule.yaml
|
|
2474
|
+
presets:
|
|
2475
|
+
- strict
|
|
2476
|
+
- id: cfn.correctness.default-value-is-within-parameter-constraints
|
|
2477
|
+
rulePath: ./rules/cfn/cfn.correctness.default-value-is-within-parameter-constraints.rule.yaml
|
|
2478
|
+
presets:
|
|
2479
|
+
- strict
|
|
2480
|
+
- id: cfn.correctness.resource-elb-properties
|
|
2481
|
+
rulePath: ./rules/cfn/cfn.correctness.resource-elb-properties.rule.yaml
|
|
2482
|
+
presets:
|
|
2483
|
+
- strict
|
|
2484
|
+
- id: cfn.correctness.check-ec2-ebs-properties
|
|
2485
|
+
rulePath: ./rules/cfn/cfn.correctness.check-ec2-ebs-properties.rule.yaml
|
|
2486
|
+
presets:
|
|
2487
|
+
- strict
|
|
2488
|
+
- id: cfn.correctness.resource-ec2-security-group-ingress-properties
|
|
2489
|
+
rulePath: ./rules/cfn/cfn.correctness.resource-ec2-security-group-ingress-properties.rule.yaml
|
|
2490
|
+
presets:
|
|
2491
|
+
- strict
|
|
2492
|
+
- id: cfn.security.check-if-iam-policies-are-properly-configured
|
|
2493
|
+
rulePath: ./rules/cfn/cfn.security.check-if-iam-policies-are-properly-configured.rule.yaml
|
|
2494
|
+
presets:
|
|
2495
|
+
- strict
|
|
2496
|
+
- security
|
|
2497
|
+
- id: cfn.correctness.check-properties-that-are-mutually-exclusive
|
|
2498
|
+
rulePath: ./rules/cfn/cfn.correctness.check-properties-that-are-mutually-exclusive.rule.yaml
|
|
2499
|
+
presets:
|
|
2500
|
+
- strict
|
|
2501
|
+
- id: cfn.correctness.check-properties-that-are-required-together
|
|
2502
|
+
rulePath: ./rules/cfn/cfn.correctness.check-properties-that-are-required-together.rule.yaml
|
|
2503
|
+
presets:
|
|
2504
|
+
- strict
|
|
2505
|
+
- id: cfn.correctness.check-properties-that-need-at-least-one-of-a-list-of-properties
|
|
2506
|
+
rulePath: ./rules/cfn/cfn.correctness.check-properties-that-need-at-least-one-of-a-list-of-properties.rule.yaml
|
|
2507
|
+
presets:
|
|
2508
|
+
- strict
|
|
2509
|
+
- id: cfn.correctness.check-properties-that-need-only-one-of-a-list-of-properties
|
|
2510
|
+
rulePath: ./rules/cfn/cfn.correctness.check-properties-that-need-only-one-of-a-list-of-properties.rule.yaml
|
|
2511
|
+
presets:
|
|
2512
|
+
- strict
|
|
2513
|
+
- id: cfn.correctness.check-for-subscriptionfilters-have-beyond-2-attachments-to-a-cloudwatch-log-group
|
|
2514
|
+
rulePath: ./rules/cfn/cfn.correctness.check-for-subscriptionfilters-have-beyond-2-attachments-to-a-cloudwatch-log-group.rule.yaml
|
|
2515
|
+
presets:
|
|
2516
|
+
- strict
|
|
2517
|
+
- id: cfn.correctness.snapstart-supports-the-configured-runtime
|
|
2518
|
+
rulePath: ./rules/cfn/cfn.correctness.snapstart-supports-the-configured-runtime.rule.yaml
|
|
2519
|
+
presets:
|
|
2520
|
+
- strict
|
|
2521
|
+
- id: cfn.correctness.check-if-eol-lambda-function-runtimes-are-used
|
|
2522
|
+
rulePath: ./rules/cfn/cfn.correctness.check-if-eol-lambda-function-runtimes-are-used.rule.yaml
|
|
2523
|
+
presets:
|
|
2524
|
+
- strict
|
|
2525
|
+
- id: cfn.correctness.check-state-machine-definition-for-proper-syntax
|
|
2526
|
+
rulePath: ./rules/cfn/cfn.correctness.check-state-machine-definition-for-proper-syntax.rule.yaml
|
|
2527
|
+
presets:
|
|
2528
|
+
- strict
|
|
2529
|
+
- id: cfn.correctness.codepipeline-stages
|
|
2530
|
+
rulePath: ./rules/cfn/cfn.correctness.codepipeline-stages.rule.yaml
|
|
2531
|
+
presets:
|
|
2532
|
+
- strict
|
|
2533
|
+
- id: cfn.correctness.codepipeline-stage-actions
|
|
2534
|
+
rulePath: ./rules/cfn/cfn.correctness.codepipeline-stage-actions.rule.yaml
|
|
2535
|
+
presets:
|
|
2536
|
+
- strict
|
|
2537
|
+
- id: cfn.correctness.resource-schema
|
|
2538
|
+
rulePath: ./rules/cfn/cfn.correctness.resource-schema.rule.yaml
|
|
2539
|
+
presets:
|
|
2540
|
+
- strict
|
|
2541
|
+
- id: cfn.correctness.basic-cloudformation-resource-check
|
|
2542
|
+
rulePath: ./rules/cfn/cfn.correctness.basic-cloudformation-resource-check.rule.yaml
|
|
2543
|
+
presets:
|
|
2544
|
+
- strict
|
|
2545
|
+
- id: cfn.correctness.resource-properties-are-invalid
|
|
2546
|
+
rulePath: ./rules/cfn/cfn.correctness.resource-properties-are-invalid.rule.yaml
|
|
2547
|
+
presets:
|
|
2548
|
+
- strict
|
|
2549
|
+
- id: cfn.correctness.required-resource-properties-are-missing
|
|
2550
|
+
rulePath: ./rules/cfn/cfn.correctness.required-resource-properties-are-missing.rule.yaml
|
|
2551
|
+
presets:
|
|
2552
|
+
- strict
|
|
2553
|
+
- id: cfn.correctness.resource-dependencies-are-not-circular
|
|
2554
|
+
rulePath: ./rules/cfn/cfn.correctness.resource-dependencies-are-not-circular.rule.yaml
|
|
2555
|
+
presets:
|
|
2556
|
+
- strict
|
|
2557
|
+
- id: cfn.correctness.check-dependson-values-for-resources
|
|
2558
|
+
rulePath: ./rules/cfn/cfn.correctness.check-dependson-values-for-resources.rule.yaml
|
|
2559
|
+
presets:
|
|
2560
|
+
- strict
|
|
2561
|
+
- id: cfn.correctness.resources-have-appropriate-names
|
|
2562
|
+
rulePath: ./rules/cfn/cfn.correctness.resources-have-appropriate-names.rule.yaml
|
|
2563
|
+
presets:
|
|
2564
|
+
- strict
|
|
2565
|
+
- id: cfn.correctness.unique-resource-and-parameter-names
|
|
2566
|
+
rulePath: ./rules/cfn/cfn.correctness.unique-resource-and-parameter-names.rule.yaml
|
|
2567
|
+
presets:
|
|
2568
|
+
- strict
|
|
2569
|
+
- id: cfn.correctness.check-values-of-properties-for-valid-refs-and-getatts
|
|
2570
|
+
rulePath: ./rules/cfn/cfn.correctness.check-values-of-properties-for-valid-refs-and-getatts.rule.yaml
|
|
2571
|
+
presets:
|
|
2572
|
+
- strict
|
|
2573
|
+
- id: cfn.correctness.resource-limit-not-exceeded
|
|
2574
|
+
rulePath: ./rules/cfn/cfn.correctness.resource-limit-not-exceeded.rule.yaml
|
|
2575
|
+
presets:
|
|
2576
|
+
- strict
|
|
2577
|
+
- id: cfn.correctness.resource-name-limit-not-exceeded
|
|
2578
|
+
rulePath: ./rules/cfn/cfn.correctness.resource-name-limit-not-exceeded.rule.yaml
|
|
2579
|
+
presets:
|
|
2580
|
+
- strict
|
|
2581
|
+
- id: cfn.correctness.check-resource-properties-values
|
|
2582
|
+
rulePath: ./rules/cfn/cfn.correctness.check-resource-properties-values.rule.yaml
|
|
2583
|
+
presets:
|
|
2584
|
+
- strict
|
|
2585
|
+
- id: cfn.correctness.cloudfront-aliases
|
|
2586
|
+
rulePath: ./rules/cfn/cfn.correctness.cloudfront-aliases.rule.yaml
|
|
2587
|
+
presets:
|
|
2588
|
+
- strict
|
|
2589
|
+
- id: cfn.correctness.check-the-configuration-of-a-resources-updatepolicy
|
|
2590
|
+
rulePath: ./rules/cfn/cfn.correctness.check-the-configuration-of-a-resources-updatepolicy.rule.yaml
|
|
2591
|
+
presets:
|
|
2592
|
+
- strict
|
|
2593
|
+
- id: cfn.correctness.property-is-required-based-on-another-properties-value
|
|
2594
|
+
rulePath: ./rules/cfn/cfn.correctness.property-is-required-based-on-another-properties-value.rule.yaml
|
|
2595
|
+
presets:
|
|
2596
|
+
- strict
|
|
2597
|
+
- id: cfn.correctness.property-is-unwanted-based-on-another-properties-value
|
|
2598
|
+
rulePath: ./rules/cfn/cfn.correctness.property-is-unwanted-based-on-another-properties-value.rule.yaml
|
|
2599
|
+
presets:
|
|
2600
|
+
- strict
|
|
2601
|
+
- id: cfn.correctness.validate-route53-recordsets
|
|
2602
|
+
rulePath: ./rules/cfn/cfn.correctness.validate-route53-recordsets.rule.yaml
|
|
2603
|
+
presets:
|
|
2604
|
+
- strict
|
|
2605
|
+
- id: cfn.correctness.check-events-rule-targets-are-less-than-or-equal-to-5
|
|
2606
|
+
rulePath: ./rules/cfn/cfn.correctness.check-events-rule-targets-are-less-than-or-equal-to-5.rule.yaml
|
|
2607
|
+
presets:
|
|
2608
|
+
- strict
|
|
2609
|
+
- id: cfn.correctness.resource-subnetroutetableassociation-properties
|
|
2610
|
+
rulePath: ./rules/cfn/cfn.correctness.resource-subnetroutetableassociation-properties.rule.yaml
|
|
2611
|
+
presets:
|
|
2612
|
+
- strict
|
|
2613
|
+
- id: cfn.correctness.rds-instance-type-is-compatible-with-the-rds-type
|
|
2614
|
+
rulePath: ./rules/cfn/cfn.correctness.rds-instance-type-is-compatible-with-the-rds-type.rule.yaml
|
|
2615
|
+
presets:
|
|
2616
|
+
- strict
|
|
2617
|
+
- id: cfn.correctness.check-elastic-cache-redis-cluster-settings
|
|
2618
|
+
rulePath: ./rules/cfn/cfn.correctness.check-elastic-cache-redis-cluster-settings.rule.yaml
|
|
2619
|
+
presets:
|
|
2620
|
+
- strict
|
|
2621
|
+
- id: cfn.correctness.validate-aws-event-scheduleexpression-format
|
|
2622
|
+
rulePath: ./rules/cfn/cfn.correctness.validate-aws-event-scheduleexpression-format.rule.yaml
|
|
2623
|
+
presets:
|
|
2624
|
+
- strict
|
|
2625
|
+
- id: cfn.correctness.check-if-properties-have-a-valid-value
|
|
2626
|
+
rulePath: ./rules/cfn/cfn.correctness.check-if-properties-have-a-valid-value.rule.yaml
|
|
2627
|
+
presets:
|
|
2628
|
+
- strict
|
|
2629
|
+
- id: cfn.correctness.check-if-property-values-adhere-to-a-specific-pattern
|
|
2630
|
+
rulePath: ./rules/cfn/cfn.correctness.check-if-property-values-adhere-to-a-specific-pattern.rule.yaml
|
|
2631
|
+
presets:
|
|
2632
|
+
- strict
|
|
2633
|
+
- id: cfn.correctness.check-if-a-list-has-between-min-and-max-number-of-values-specified
|
|
2634
|
+
rulePath: ./rules/cfn/cfn.correctness.check-if-a-list-has-between-min-and-max-number-of-values-specified.rule.yaml
|
|
2635
|
+
presets:
|
|
2636
|
+
- strict
|
|
2637
|
+
- id: cfn.correctness.check-if-a-string-has-between-min-and-max-number-of-values-specified
|
|
2638
|
+
rulePath: ./rules/cfn/cfn.correctness.check-if-a-string-has-between-min-and-max-number-of-values-specified.rule.yaml
|
|
2639
|
+
presets:
|
|
2640
|
+
- strict
|
|
2641
|
+
- id: cfn.correctness.check-if-a-number-is-between-min-and-max
|
|
2642
|
+
rulePath: ./rules/cfn/cfn.correctness.check-if-a-number-is-between-min-and-max.rule.yaml
|
|
2643
|
+
presets:
|
|
2644
|
+
- strict
|
|
2645
|
+
- id: cfn.correctness.check-deletionpolicy-values-for-resources
|
|
2646
|
+
rulePath: ./rules/cfn/cfn.correctness.check-deletionpolicy-values-for-resources.rule.yaml
|
|
2647
|
+
presets:
|
|
2648
|
+
- strict
|
|
2649
|
+
- id: cfn.correctness.check-updatereplacepolicy-values-for-resources
|
|
2650
|
+
rulePath: ./rules/cfn/cfn.correctness.check-updatereplacepolicy-values-for-resources.rule.yaml
|
|
2651
|
+
presets:
|
|
2652
|
+
- strict
|
|
2653
|
+
- id: cfn.correctness.check-if-a-list-has-duplicate-values
|
|
2654
|
+
rulePath: ./rules/cfn/cfn.correctness.check-if-a-list-has-duplicate-values.rule.yaml
|
|
2655
|
+
presets:
|
|
2656
|
+
- strict
|
|
2657
|
+
- id: cfn.correctness.check-if-serverless-resources-have-serverless-transform
|
|
2658
|
+
rulePath: ./rules/cfn/cfn.correctness.check-if-serverless-resources-have-serverless-transform.rule.yaml
|
|
2659
|
+
presets:
|
|
2660
|
+
- strict
|
|
2661
|
+
- id: cfn.correctness.attributedefinitions-keyschemas-mismatch
|
|
2662
|
+
rulePath: ./rules/cfn/cfn.correctness.attributedefinitions-keyschemas-mismatch.rule.yaml
|
|
2663
|
+
presets:
|
|
2664
|
+
- strict
|
|
2665
|
+
- id: cfn.correctness.recordset-hostedzonename-is-a-superdomain-of-name
|
|
2666
|
+
rulePath: ./rules/cfn/cfn.correctness.recordset-hostedzonename-is-a-superdomain-of-name.rule.yaml
|
|
2667
|
+
presets:
|
|
2668
|
+
- strict
|
|
2669
|
+
- id: cfn.correctness.check-at-least-one-essential-container-is-specified
|
|
2670
|
+
rulePath: ./rules/cfn/cfn.correctness.check-at-least-one-essential-container-is-specified.rule.yaml
|
|
2671
|
+
presets:
|
|
2672
|
+
- strict
|
|
2673
|
+
- id: cfn.correctness.validate-parameters-for-in-a-nested-stack
|
|
2674
|
+
rulePath: ./rules/cfn/cfn.correctness.validate-parameters-for-in-a-nested-stack.rule.yaml
|
|
2675
|
+
presets:
|
|
2676
|
+
- strict
|
|
2677
|
+
- id: cfn.correctness.check-fargate-service-scheduling-strategy
|
|
2678
|
+
rulePath: ./rules/cfn/cfn.correctness.check-fargate-service-scheduling-strategy.rule.yaml
|
|
2679
|
+
presets:
|
|
2680
|
+
- strict
|
|
2681
|
+
- id: cfn.correctness.validate-accesscontrol-are-set-with-ownershipcontrols
|
|
2682
|
+
rulePath: ./rules/cfn/cfn.correctness.validate-accesscontrol-are-set-with-ownershipcontrols.rule.yaml
|
|
2683
|
+
presets:
|
|
2684
|
+
- strict
|
|
2685
|
+
- id: cfn.correctness.check-if-refing-to-a-iam-resource-with-path-set
|
|
2686
|
+
rulePath: ./rules/cfn/cfn.correctness.check-if-refing-to-a-iam-resource-with-path-set.rule.yaml
|
|
2687
|
+
presets:
|
|
2688
|
+
- strict
|
|
2689
|
+
- id: cfn.correctness.check-if-a-json-object-is-within-size-limits
|
|
2690
|
+
rulePath: ./rules/cfn/cfn.correctness.check-if-a-json-object-is-within-size-limits.rule.yaml
|
|
2691
|
+
presets:
|
|
2692
|
+
- strict
|
|
2693
|
+
- id: cfn.correctness.validationdomain-is-superdomain-of-domainname
|
|
2694
|
+
rulePath: ./rules/cfn/cfn.correctness.validationdomain-is-superdomain-of-domainname.rule.yaml
|
|
2695
|
+
presets:
|
|
2696
|
+
- strict
|
|
2697
|
+
- id: cfn.correctness.check-minimum-90-period-is-met-between-backupplan-cold-and-delete
|
|
2698
|
+
rulePath: ./rules/cfn/cfn.correctness.check-minimum-90-period-is-met-between-backupplan-cold-and-delete.rule.yaml
|
|
2699
|
+
presets:
|
|
2700
|
+
- strict
|
|
2701
|
+
- id: cfn.correctness.metadata-interface-have-appropriate-properties
|
|
2702
|
+
rulePath: ./rules/cfn/cfn.correctness.metadata-interface-have-appropriate-properties.rule.yaml
|
|
2703
|
+
presets:
|
|
2704
|
+
- strict
|
|
2705
|
+
- id: cfn.correctness.validate-the-configuration-of-the-metadata-section
|
|
2706
|
+
rulePath: ./rules/cfn/cfn.correctness.validate-the-configuration-of-the-metadata-section.rule.yaml
|
|
2707
|
+
presets:
|
|
2708
|
+
- strict
|
|
2709
|
+
- id: cfn.correctness.check-that-modules-resources-are-valid
|
|
2710
|
+
rulePath: ./rules/cfn/cfn.correctness.check-that-modules-resources-are-valid.rule.yaml
|
|
2711
|
+
presets:
|
|
2712
|
+
- strict
|
|
2713
|
+
- id: cfn.correctness.outputs-have-appropriate-properties
|
|
2714
|
+
rulePath: ./rules/cfn/cfn.correctness.outputs-have-appropriate-properties.rule.yaml
|
|
2715
|
+
presets:
|
|
2716
|
+
- strict
|
|
2717
|
+
- id: cfn.correctness.outputs-have-required-properties
|
|
2718
|
+
rulePath: ./rules/cfn/cfn.correctness.outputs-have-required-properties.rule.yaml
|
|
2719
|
+
presets:
|
|
2720
|
+
- strict
|
|
2721
|
+
- id: cfn.correctness.outputs-have-values-of-strings
|
|
2722
|
+
rulePath: ./rules/cfn/cfn.correctness.outputs-have-values-of-strings.rule.yaml
|
|
2723
|
+
presets:
|
|
2724
|
+
- strict
|
|
2725
|
+
- id: cfn.correctness.outputs-have-appropriate-names
|
|
2726
|
+
rulePath: ./rules/cfn/cfn.correctness.outputs-have-appropriate-names.rule.yaml
|
|
2727
|
+
presets:
|
|
2728
|
+
- strict
|
|
2729
|
+
- id: cfn.correctness.outputs-descriptions-can-only-be-strings
|
|
2730
|
+
rulePath: ./rules/cfn/cfn.correctness.outputs-descriptions-can-only-be-strings.rule.yaml
|
|
2731
|
+
presets:
|
|
2732
|
+
- strict
|
|
2733
|
+
- id: cfn.correctness.output-limit-not-exceeded
|
|
2734
|
+
rulePath: ./rules/cfn/cfn.correctness.output-limit-not-exceeded.rule.yaml
|
|
2735
|
+
presets:
|
|
2736
|
+
- strict
|
|
2737
|
+
- id: cfn.correctness.output-name-limit-not-exceeded
|
|
2738
|
+
rulePath: ./rules/cfn/cfn.correctness.output-name-limit-not-exceeded.rule.yaml
|
|
2739
|
+
presets:
|
|
2740
|
+
- strict
|
|
2741
|
+
- id: cfn.correctness.output-description-limit-not-exceeded
|
|
2742
|
+
rulePath: ./rules/cfn/cfn.correctness.output-description-limit-not-exceeded.rule.yaml
|
|
2743
|
+
presets:
|
|
2744
|
+
- strict
|
|
2745
|
+
- id: cfn.correctness.mappings-are-appropriately-configured
|
|
2746
|
+
rulePath: ./rules/cfn/cfn.correctness.mappings-are-appropriately-configured.rule.yaml
|
|
2747
|
+
presets:
|
|
2748
|
+
- strict
|
|
2749
|
+
- id: cfn.correctness.mappings-have-appropriate-names
|
|
2750
|
+
rulePath: ./rules/cfn/cfn.correctness.mappings-have-appropriate-names.rule.yaml
|
|
2751
|
+
presets:
|
|
2752
|
+
- strict
|
|
2753
|
+
- id: cfn.correctness.mapping-keys-are-strings-and-alphanumeric
|
|
2754
|
+
rulePath: ./rules/cfn/cfn.correctness.mapping-keys-are-strings-and-alphanumeric.rule.yaml
|
|
2755
|
+
presets:
|
|
2756
|
+
- strict
|
|
2757
|
+
- id: cfn.correctness.mapping-limit-not-exceeded
|
|
2758
|
+
rulePath: ./rules/cfn/cfn.correctness.mapping-limit-not-exceeded.rule.yaml
|
|
2759
|
+
presets:
|
|
2760
|
+
- strict
|
|
2761
|
+
- id: cfn.correctness.mapping-name-limit-not-exceeded
|
|
2762
|
+
rulePath: ./rules/cfn/cfn.correctness.mapping-name-limit-not-exceeded.rule.yaml
|
|
2763
|
+
presets:
|
|
2764
|
+
- strict
|
|
2765
|
+
- id: cfn.correctness.mapping-attribute-limit-not-exceeded
|
|
2766
|
+
rulePath: ./rules/cfn/cfn.correctness.mapping-attribute-limit-not-exceeded.rule.yaml
|
|
2767
|
+
presets:
|
|
2768
|
+
- strict
|
|
2769
|
+
- id: cfn.correctness.conditions-have-appropriate-properties
|
|
2770
|
+
rulePath: ./rules/cfn/cfn.correctness.conditions-have-appropriate-properties.rule.yaml
|
|
2771
|
+
presets:
|
|
2772
|
+
- strict
|
|
2773
|
+
- id: cfn.correctness.check-if-the-referenced-conditions-are-defined
|
|
2774
|
+
rulePath: ./rules/cfn/cfn.correctness.check-if-the-referenced-conditions-are-defined.rule.yaml
|
|
2775
|
+
presets:
|
|
2776
|
+
- strict
|
|
2777
|
+
- id: cfn.correctness.check-fn-equals-structure-for-validity
|
|
2778
|
+
rulePath: ./rules/cfn/cfn.correctness.check-fn-equals-structure-for-validity.rule.yaml
|
|
2779
|
+
presets:
|
|
2780
|
+
- strict
|
|
2781
|
+
- id: cfn.correctness.check-fn-and-structure-for-validity
|
|
2782
|
+
rulePath: ./rules/cfn/cfn.correctness.check-fn-and-structure-for-validity.rule.yaml
|
|
2783
|
+
presets:
|
|
2784
|
+
- strict
|
|
2785
|
+
- id: cfn.correctness.check-fn-not-structure-for-validity
|
|
2786
|
+
rulePath: ./rules/cfn/cfn.correctness.check-fn-not-structure-for-validity.rule.yaml
|
|
2787
|
+
presets:
|
|
2788
|
+
- strict
|
|
2789
|
+
- id: cfn.correctness.check-fn-or-structure-for-validity
|
|
2790
|
+
rulePath: ./rules/cfn/cfn.correctness.check-fn-or-structure-for-validity.rule.yaml
|
|
2791
|
+
presets:
|
|
2792
|
+
- strict
|
|
2793
|
+
- id: cfn.maintainability.template-size-limit-i1002
|
|
2794
|
+
rulePath: ./rules/cfn/cfn.maintainability.template-size-limit-i1002.rule.yaml
|
|
2795
|
+
presets:
|
|
2796
|
+
- strict
|
|
2797
|
+
- id: cfn.maintainability.template-description-limit-i1003
|
|
2798
|
+
rulePath: ./rules/cfn/cfn.maintainability.template-description-limit-i1003.rule.yaml
|
|
2799
|
+
presets:
|
|
2800
|
+
- strict
|
|
2801
|
+
- id: cfn.maintainability.use-sub-instead-of-join
|
|
2802
|
+
rulePath: ./rules/cfn/cfn.maintainability.use-sub-instead-of-join.rule.yaml
|
|
2803
|
+
presets:
|
|
2804
|
+
- strict
|
|
2805
|
+
- id: cfn.maintainability.parameter-limit
|
|
2806
|
+
rulePath: ./rules/cfn/cfn.maintainability.parameter-limit.rule.yaml
|
|
2807
|
+
presets:
|
|
2808
|
+
- strict
|
|
2809
|
+
- id: cfn.maintainability.parameter-name-limit
|
|
2810
|
+
rulePath: ./rules/cfn/cfn.maintainability.parameter-name-limit.rule.yaml
|
|
2811
|
+
presets:
|
|
2812
|
+
- strict
|
|
2813
|
+
- id: cfn.maintainability.parameter-value-limit
|
|
2814
|
+
rulePath: ./rules/cfn/cfn.maintainability.parameter-value-limit.rule.yaml
|
|
2815
|
+
presets:
|
|
2816
|
+
- strict
|
|
2817
|
+
- id: cfn.maintainability.validate-that-snapstart-is-configured-for-java11-runtimes
|
|
2818
|
+
rulePath: ./rules/cfn/cfn.maintainability.validate-that-snapstart-is-configured-for-java11-runtimes.rule.yaml
|
|
2819
|
+
presets:
|
|
2820
|
+
- strict
|
|
2821
|
+
- id: cfn.maintainability.resource-limit
|
|
2822
|
+
rulePath: ./rules/cfn/cfn.maintainability.resource-limit.rule.yaml
|
|
2823
|
+
presets:
|
|
2824
|
+
- strict
|
|
2825
|
+
- id: cfn.maintainability.check-stateful-resources-have-a-set-updatereplacepolicy-deletionpolicy
|
|
2826
|
+
rulePath: ./rules/cfn/cfn.maintainability.check-stateful-resources-have-a-set-updatereplacepolicy-deletionpolicy.rule.yaml
|
|
2827
|
+
presets:
|
|
2828
|
+
- strict
|
|
2829
|
+
- id: cfn.maintainability.resource-name-limit
|
|
2830
|
+
rulePath: ./rules/cfn/cfn.maintainability.resource-name-limit.rule.yaml
|
|
2831
|
+
presets:
|
|
2832
|
+
- strict
|
|
2833
|
+
- id: cfn.maintainability.check-resources-with-auto-expiring-content-have-explicit-retention-period
|
|
2834
|
+
rulePath: ./rules/cfn/cfn.maintainability.check-resources-with-auto-expiring-content-have-explicit-retention-period.rule.yaml
|
|
2835
|
+
presets:
|
|
2836
|
+
- strict
|
|
2837
|
+
- id: cfn.maintainability.check-if-a-list-that-allows-duplicates-has-any-duplicates
|
|
2838
|
+
rulePath: ./rules/cfn/cfn.maintainability.check-if-a-list-that-allows-duplicates-has-any-duplicates.rule.yaml
|
|
2839
|
+
presets:
|
|
2840
|
+
- strict
|
|
2841
|
+
- id: cfn.maintainability.arns-should-use-correctly-placed-pseudo-parameters
|
|
2842
|
+
rulePath: ./rules/cfn/cfn.maintainability.arns-should-use-correctly-placed-pseudo-parameters.rule.yaml
|
|
2843
|
+
presets:
|
|
2844
|
+
- strict
|
|
2845
|
+
- id: cfn.maintainability.checks-for-legacy-instance-type-generations
|
|
2846
|
+
rulePath: ./rules/cfn/cfn.maintainability.checks-for-legacy-instance-type-generations.rule.yaml
|
|
2847
|
+
presets:
|
|
2848
|
+
- strict
|
|
2849
|
+
- id: cfn.maintainability.output-limit
|
|
2850
|
+
rulePath: ./rules/cfn/cfn.maintainability.output-limit.rule.yaml
|
|
2851
|
+
presets:
|
|
2852
|
+
- strict
|
|
2853
|
+
- id: cfn.maintainability.output-name-limit
|
|
2854
|
+
rulePath: ./rules/cfn/cfn.maintainability.output-name-limit.rule.yaml
|
|
2855
|
+
presets:
|
|
2856
|
+
- strict
|
|
2857
|
+
- id: cfn.maintainability.output-description-limit
|
|
2858
|
+
rulePath: ./rules/cfn/cfn.maintainability.output-description-limit.rule.yaml
|
|
2859
|
+
presets:
|
|
2860
|
+
- strict
|
|
2861
|
+
- id: cfn.maintainability.mapping-limit
|
|
2862
|
+
rulePath: ./rules/cfn/cfn.maintainability.mapping-limit.rule.yaml
|
|
2863
|
+
presets:
|
|
2864
|
+
- strict
|
|
2865
|
+
- id: cfn.maintainability.mapping-name-limit
|
|
2866
|
+
rulePath: ./rules/cfn/cfn.maintainability.mapping-name-limit.rule.yaml
|
|
2867
|
+
presets:
|
|
2868
|
+
- strict
|
|
2869
|
+
- id: cfn.maintainability.mapping-attribute-limit
|
|
2870
|
+
rulePath: ./rules/cfn/cfn.maintainability.mapping-attribute-limit.rule.yaml
|
|
2871
|
+
presets:
|
|
2872
|
+
- strict
|
|
2873
|
+
- id: cfn.maintainability.ref-getatt-to-resource-that-is-available-when-conditions-are-applied
|
|
2874
|
+
rulePath: ./rules/cfn/cfn.maintainability.ref-getatt-to-resource-that-is-available-when-conditions-are-applied.rule.yaml
|
|
2875
|
+
presets:
|
|
2876
|
+
- strict
|
|
2877
|
+
- id: cfn.maintainability.findinmap-keys-exist-in-the-map
|
|
2878
|
+
rulePath: ./rules/cfn/cfn.maintainability.findinmap-keys-exist-in-the-map.rule.yaml
|
|
2879
|
+
presets:
|
|
2880
|
+
- strict
|
|
2881
|
+
- id: cfn.maintainability.sub-validation-of-parameters-w1019
|
|
2882
|
+
rulePath: ./rules/cfn/cfn.maintainability.sub-validation-of-parameters-w1019.rule.yaml
|
|
2883
|
+
presets:
|
|
2884
|
+
- strict
|
|
2885
|
+
- id: cfn.maintainability.sub-isn-t-needed-if-it-doesn-t-have-a-variable-defined
|
|
2886
|
+
rulePath: ./rules/cfn/cfn.maintainability.sub-isn-t-needed-if-it-doesn-t-have-a-variable-defined.rule.yaml
|
|
2887
|
+
presets:
|
|
2888
|
+
- strict
|
|
2889
|
+
- id: cfn.maintainability.check-if-parameters-are-used
|
|
2890
|
+
rulePath: ./rules/cfn/cfn.maintainability.check-if-parameters-are-used.rule.yaml
|
|
2891
|
+
presets:
|
|
2892
|
+
- strict
|
|
2893
|
+
- id: cfn.maintainability.check-if-parameters-have-a-valid-value
|
|
2894
|
+
rulePath: ./rules/cfn/cfn.maintainability.check-if-parameters-have-a-valid-value.rule.yaml
|
|
2895
|
+
presets:
|
|
2896
|
+
- strict
|
|
2897
|
+
- id: cfn.maintainability.check-if-parameters-have-a-valid-value-based-on-an-allowed-pattern
|
|
2898
|
+
rulePath: ./rules/cfn/cfn.maintainability.check-if-parameters-have-a-valid-value-based-on-an-allowed-pattern.rule.yaml
|
|
2899
|
+
presets:
|
|
2900
|
+
- strict
|
|
2901
|
+
- id: cfn.security.check-if-password-properties-are-correctly-configured
|
|
2902
|
+
rulePath: ./rules/cfn/cfn.security.check-if-password-properties-are-correctly-configured.rule.yaml
|
|
2903
|
+
presets:
|
|
2904
|
+
- strict
|
|
2905
|
+
- security
|
|
2906
|
+
- id: cfn.maintainability.check-if-imageid-parameters-have-the-correct-type
|
|
2907
|
+
rulePath: ./rules/cfn/cfn.maintainability.check-if-imageid-parameters-have-the-correct-type.rule.yaml
|
|
2908
|
+
presets:
|
|
2909
|
+
- strict
|
|
2910
|
+
- id: cfn.maintainability.parameter-memory-size-attributes-should-have-max-and-min
|
|
2911
|
+
rulePath: ./rules/cfn/cfn.maintainability.parameter-memory-size-attributes-should-have-max-and-min.rule.yaml
|
|
2912
|
+
presets:
|
|
2913
|
+
- strict
|
|
2914
|
+
- id: cfn.maintainability.check-iam-resource-policies-syntax
|
|
2915
|
+
rulePath: ./rules/cfn/cfn.maintainability.check-iam-resource-policies-syntax.rule.yaml
|
|
2916
|
+
presets:
|
|
2917
|
+
- strict
|
|
2918
|
+
- id: cfn.maintainability.validate-that-snapstart-is-properly-configured
|
|
2919
|
+
rulePath: ./rules/cfn/cfn.maintainability.validate-that-snapstart-is-properly-configured.rule.yaml
|
|
2920
|
+
presets:
|
|
2921
|
+
- strict
|
|
2922
|
+
- id: cfn.maintainability.check-if-eol-lambda-function-runtimes-are-used-w2531
|
|
2923
|
+
rulePath: ./rules/cfn/cfn.maintainability.check-if-eol-lambda-function-runtimes-are-used-w2531.rule.yaml
|
|
2924
|
+
presets:
|
|
2925
|
+
- strict
|
|
2926
|
+
- id: cfn.maintainability.check-required-properties-for-lambda-if-the-deployment-package-is-a-zip-file
|
|
2927
|
+
rulePath: ./rules/cfn/cfn.maintainability.check-required-properties-for-lambda-if-the-deployment-package-is-a-zip-file.rule.yaml
|
|
2928
|
+
presets:
|
|
2929
|
+
- strict
|
|
2930
|
+
- id: cfn.maintainability.warn-when-properties-are-configured-to-only-work-with-the-package-command
|
|
2931
|
+
rulePath: ./rules/cfn/cfn.maintainability.warn-when-properties-are-configured-to-only-work-with-the-package-command.rule.yaml
|
|
2932
|
+
presets:
|
|
2933
|
+
- strict
|
|
2934
|
+
- id: cfn.maintainability.check-obsolete-dependson-configuration-for-resources
|
|
2935
|
+
rulePath: ./rules/cfn/cfn.maintainability.check-obsolete-dependson-configuration-for-resources.rule.yaml
|
|
2936
|
+
presets:
|
|
2937
|
+
- strict
|
|
2938
|
+
- id: cfn.maintainability.availability-zone-parameters-should-not-be-hardcoded
|
|
2939
|
+
rulePath: ./rules/cfn/cfn.maintainability.availability-zone-parameters-should-not-be-hardcoded.rule.yaml
|
|
2940
|
+
presets:
|
|
2941
|
+
- strict
|
|
2942
|
+
- id: cfn.maintainability.check-resources-with-updatereplacepolicy-deletionpolicy-have-both
|
|
2943
|
+
rulePath: ./rules/cfn/cfn.maintainability.check-resources-with-updatereplacepolicy-deletionpolicy-have-both.rule.yaml
|
|
2944
|
+
presets:
|
|
2945
|
+
- strict
|
|
2946
|
+
- id: cfn.security.check-iam-permission-configuration
|
|
2947
|
+
rulePath: ./rules/cfn/cfn.security.check-iam-permission-configuration.rule.yaml
|
|
2948
|
+
presets:
|
|
2949
|
+
- strict
|
|
2950
|
+
- security
|
|
2951
|
+
- id: cfn.security.controlling-access-to-an-s3-bucket-should-be-done-with-bucket-policies
|
|
2952
|
+
rulePath: ./rules/cfn/cfn.security.controlling-access-to-an-s3-bucket-should-be-done-with-bucket-policies.rule.yaml
|
|
2953
|
+
presets:
|
|
2954
|
+
- strict
|
|
2955
|
+
- security
|
|
2956
|
+
- id: cfn.maintainability.metadata-interface-parameters-exist
|
|
2957
|
+
rulePath: ./rules/cfn/cfn.maintainability.metadata-interface-parameters-exist.rule.yaml
|
|
2958
|
+
presets:
|
|
2959
|
+
- strict
|
|
2960
|
+
- id: cfn.security.check-for-noecho-references
|
|
2961
|
+
rulePath: ./rules/cfn/cfn.security.check-for-noecho-references.rule.yaml
|
|
2962
|
+
presets:
|
|
2963
|
+
- strict
|
|
2964
|
+
- security
|
|
2965
|
+
- id: cfn.maintainability.check-outputs-using-importvalue
|
|
2966
|
+
rulePath: ./rules/cfn/cfn.maintainability.check-outputs-using-importvalue.rule.yaml
|
|
2967
|
+
presets:
|
|
2968
|
+
- strict
|
|
2969
|
+
- id: cfn.maintainability.check-if-mappings-are-used
|
|
2970
|
+
rulePath: ./rules/cfn/cfn.maintainability.check-if-mappings-are-used.rule.yaml
|
|
2971
|
+
presets:
|
|
2972
|
+
- strict
|
|
2973
|
+
- id: cfn.maintainability.check-if-conditions-are-used
|
|
2974
|
+
rulePath: ./rules/cfn/cfn.maintainability.check-if-conditions-are-used.rule.yaml
|
|
2975
|
+
presets:
|
|
2976
|
+
- strict
|
|
2977
|
+
- id: cfn.maintainability.fn-equals-will-always-return-true-or-false
|
|
2978
|
+
rulePath: ./rules/cfn/cfn.maintainability.fn-equals-will-always-return-true-or-false.rule.yaml
|
|
2979
|
+
presets:
|
|
2980
|
+
- strict
|