@neralabs/rerail-pack-python 0.1.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (147) hide show
  1. package/LICENSE +202 -0
  2. package/NOTICE +7 -0
  3. package/README.md +36 -0
  4. package/licenses/bandit/LICENSE +175 -0
  5. package/licenses/bandit/UPSTREAM.md +100 -0
  6. package/licenses/ruff/LICENSE +430 -0
  7. package/licenses/ruff/UPSTREAM.md +338 -0
  8. package/pack.json +912 -0
  9. package/package.json +30 -0
  10. package/rules/bandit-b101-assert-used.json +38 -0
  11. package/rules/bandit-b102-exec-used.json +125 -0
  12. package/rules/bandit-b110-try-except-pass.json +109 -0
  13. package/rules/bandit-b112-try-except-continue.json +109 -0
  14. package/rules/bandit-b113-request-without-timeout.json +138 -0
  15. package/rules/bandit-b301-pickle.json +58 -0
  16. package/rules/bandit-b302-marshal.json +48 -0
  17. package/rules/bandit-b303-md5.json +79 -0
  18. package/rules/bandit-b305-cipher-modes.json +47 -0
  19. package/rules/bandit-b306-mktemp-q.json +54 -0
  20. package/rules/bandit-b307-eval.json +125 -0
  21. package/rules/bandit-b308-mark-safe.json +47 -0
  22. package/rules/bandit-b310-urllib-urlopen.json +54 -0
  23. package/rules/bandit-b311-random.json +57 -0
  24. package/rules/bandit-b312-telnetlib.json +47 -0
  25. package/rules/bandit-b313-xml-bad-celementtree.json +50 -0
  26. package/rules/bandit-b314-xml-bad-elementtree.json +50 -0
  27. package/rules/bandit-b315-xml-bad-expatreader.json +47 -0
  28. package/rules/bandit-b316-xml-bad-expatbuilder.json +48 -0
  29. package/rules/bandit-b317-xml-bad-sax.json +58 -0
  30. package/rules/bandit-b318-xml-bad-minidom.json +48 -0
  31. package/rules/bandit-b319-xml-bad-pulldom.json +48 -0
  32. package/rules/bandit-b321-ftplib.json +47 -0
  33. package/rules/bandit-b323-unverified-context.json +47 -0
  34. package/rules/bandit-b401-import-telnetlib.json +48 -0
  35. package/rules/bandit-b402-import-ftplib.json +48 -0
  36. package/rules/bandit-b405-import-xml-etree.json +69 -0
  37. package/rules/bandit-b406-import-xml-sax.json +73 -0
  38. package/rules/bandit-b407-import-xml-expat.json +54 -0
  39. package/rules/bandit-b408-import-xml-minidom.json +54 -0
  40. package/rules/bandit-b409-import-xml-pulldom.json +54 -0
  41. package/rules/bandit-b411-import-xmlrpclib.json +48 -0
  42. package/rules/bandit-b413-import-pycrypto.json +159 -0
  43. package/rules/bandit-b415-import-pyghmi.json +48 -0
  44. package/rules/bandit-b502-ssl-with-bad-version.json +90 -0
  45. package/rules/bandit-b505-weak-cryptographic-key.json +166 -0
  46. package/rules/bandit-b507-ssh-no-host-key-verification.json +210 -0
  47. package/rules/bandit-b606-start-process-with-no-shell.json +63 -0
  48. package/rules/bandit-b610-django-extra-used.json +268 -0
  49. package/rules/bandit-b615-huggingface-unsafe-download.json +1152 -0
  50. package/rules/ruff-async100-cancel-scope-no-checkpoint.json +357 -0
  51. package/rules/ruff-async105-trio-sync-call.json +199 -0
  52. package/rules/ruff-async115-async-zero-sleep.json +264 -0
  53. package/rules/ruff-async116-long-sleep-not-forever.json +267 -0
  54. package/rules/ruff-async210-blocking-http-call-in-async-function.json +161 -0
  55. package/rules/ruff-async221-run-process-in-async-function.json +342 -0
  56. package/rules/ruff-async222-wait-for-process-in-async-function.json +144 -0
  57. package/rules/ruff-async230-blocking-open-call-in-async-function.json +339 -0
  58. package/rules/ruff-async250-blocking-input-in-async-function.json +143 -0
  59. package/rules/ruff-async251-blocking-sleep-in-async-function.json +140 -0
  60. package/rules/ruff-b002-unary-prefix-increment-decrement.json +54 -0
  61. package/rules/ruff-b003-assignment-to-os-environ.json +54 -0
  62. package/rules/ruff-b004-unreliable-callable-check.json +171 -0
  63. package/rules/ruff-b005-strip-with-multi-characters.json +131 -0
  64. package/rules/ruff-b007-unused-loop-control-variable.json +368 -0
  65. package/rules/ruff-b009-get-attr-with-constant.json +190 -0
  66. package/rules/ruff-b010-set-attr-with-constant.json +219 -0
  67. package/rules/ruff-b011-assert-false.json +62 -0
  68. package/rules/ruff-b013-redundant-tuple-in-exception-handler.json +94 -0
  69. package/rules/ruff-b014-duplicate-handler-exception.json +126 -0
  70. package/rules/ruff-b016-raise-literal.json +47 -0
  71. package/rules/ruff-b020-loop-variable-overrides-iterator.json +341 -0
  72. package/rules/ruff-b021-f-string-docstring.json +48 -0
  73. package/rules/ruff-b022-useless-contextlib-suppress.json +95 -0
  74. package/rules/ruff-b023-function-uses-loop-variable.json +560 -0
  75. package/rules/ruff-b025-duplicate-try-block-exception.json +182 -0
  76. package/rules/ruff-b026-star-arg-unpacking-after-keyword-arg.json +57 -0
  77. package/rules/ruff-b028-no-explicit-stacklevel.json +177 -0
  78. package/rules/ruff-b029-except-with-empty-tuple.json +102 -0
  79. package/rules/ruff-b032-unintentional-type-annotation.json +157 -0
  80. package/rules/ruff-b033-duplicate-value.json +129 -0
  81. package/rules/ruff-b034-re-sub-positional-args.json +159 -0
  82. package/rules/ruff-b039-mutable-contextvar-default.json +281 -0
  83. package/rules/ruff-b904-raise-without-from-inside-except.json +194 -0
  84. package/rules/ruff-b905-zip-without-explicit-strict.json +429 -0
  85. package/rules/ruff-e711-none-comparison.json +199 -0
  86. package/rules/ruff-e721-type-comparison.json +293 -0
  87. package/rules/ruff-e722-bare-except.json +57 -0
  88. package/rules/ruff-e742-ambiguous-class-name.json +47 -0
  89. package/rules/ruff-e743-ambiguous-function-name.json +47 -0
  90. package/rules/ruff-f403-undefined-local-with-import-star.json +73 -0
  91. package/rules/ruff-f405-undefined-local-with-import-star-usage.json +87 -0
  92. package/rules/ruff-f406-undefined-local-with-nested-import-star-usage.json +39 -0
  93. package/rules/ruff-f407-future-feature-not-defined.json +56 -0
  94. package/rules/ruff-f501-percent-format-invalid-format.json +88 -0
  95. package/rules/ruff-f502-percent-format-expected-mapping.json +127 -0
  96. package/rules/ruff-f503-percent-format-expected-sequence.json +127 -0
  97. package/rules/ruff-f504-percent-format-extra-named-arguments.json +46 -0
  98. package/rules/ruff-f505-percent-format-missing-argument.json +49 -0
  99. package/rules/ruff-f506-percent-format-mixed-positional-and-named.json +114 -0
  100. package/rules/ruff-f507-percent-format-positional-count-mismatch.json +78 -0
  101. package/rules/ruff-f508-percent-format-star-requires-sequence.json +112 -0
  102. package/rules/ruff-f509-percent-format-unsupported-format-character.json +86 -0
  103. package/rules/ruff-f521-string-dot-format-invalid-format.json +83 -0
  104. package/rules/ruff-f522-string-dot-format-extra-named-arguments.json +46 -0
  105. package/rules/ruff-f523-string-dot-format-extra-positional-arguments.json +48 -0
  106. package/rules/ruff-f524-string-dot-format-missing-arguments.json +46 -0
  107. package/rules/ruff-f525-string-dot-format-mixing-automatic.json +99 -0
  108. package/rules/ruff-f541-f-string-missing-placeholders.json +52 -0
  109. package/rules/ruff-f601-multi-value-repeated-key-literal.json +215 -0
  110. package/rules/ruff-f602-multi-value-repeated-key-variable.json +123 -0
  111. package/rules/ruff-f622-multiple-starred-expressions.json +57 -0
  112. package/rules/ruff-f632-is-literal.json +232 -0
  113. package/rules/ruff-f633-invalid-print-syntax.json +299 -0
  114. package/rules/ruff-f701-break-outside-loop.json +64 -0
  115. package/rules/ruff-f702-continue-outside-loop.json +64 -0
  116. package/rules/ruff-f706-return-outside-function.json +61 -0
  117. package/rules/ruff-f707-default-except-not-last.json +50 -0
  118. package/rules/ruff-f722-forward-annotation-syntax-error.json +654 -0
  119. package/rules/ruff-f822-undefined-export.json +55 -0
  120. package/rules/ruff-f823-undefined-local.json +42 -0
  121. package/rules/ruff-f842-unused-annotation.json +51 -0
  122. package/rules/ruff-f901-raise-not-implemented.json +97 -0
  123. package/rules/ruff-pie794-duplicate-class-field-definition.json +157 -0
  124. package/rules/ruff-pie796-non-unique-enums.json +460 -0
  125. package/rules/ruff-pie800-unnecessary-spread.json +62 -0
  126. package/rules/ruff-pie804-unnecessary-dict-kwargs.json +179 -0
  127. package/rules/ruff-pie807-reimplemented-container-builtin.json +100 -0
  128. package/rules/ruff-pie810-multiple-starts-ends-with.json +585 -0
  129. package/rules/ruff-ret501-unnecessary-return-none.json +256 -0
  130. package/rules/ruff-ret502-implicit-return-value.json +163 -0
  131. package/rules/ruff-ret505-superfluous-else-return.json +211 -0
  132. package/rules/ruff-ret506-superfluous-else-raise.json +211 -0
  133. package/rules/ruff-ret507-superfluous-else-continue.json +211 -0
  134. package/rules/ruff-ret508-superfluous-else-break.json +211 -0
  135. package/rules/ruff-sim101-duplicate-isinstance-call.json +384 -0
  136. package/rules/ruff-sim107-return-in-try-except-finally.json +82 -0
  137. package/rules/ruff-sim109-compare-with-tuple.json +205 -0
  138. package/rules/ruff-sim112-uncapitalized-environment-variables.json +168 -0
  139. package/rules/ruff-sim113-enumerate-for-loop.json +562 -0
  140. package/rules/ruff-sim208-double-negation.json +58 -0
  141. package/rules/ruff-sim210-if-expr-with-true-false.json +90 -0
  142. package/rules/ruff-sim211-if-expr-with-false-true.json +90 -0
  143. package/rules/ruff-sim212-if-expr-with-twisted-arms.json +95 -0
  144. package/rules/ruff-sim300-yoda-conditions.json +487 -0
  145. package/rules/ruff-sim905-split-static-string.json +579 -0
  146. package/rules/ruff-sim910-dict-get-with-none-default.json +518 -0
  147. package/rules/ruff-t100-debugger.json +197 -0
@@ -0,0 +1,368 @@
1
+ {
2
+ "format": "rerail.policy/v1",
3
+ "id": "ruff-b007-unused-loop-control-variable",
4
+ "revision": 1,
5
+ "mode": "steer",
6
+ "description": "Port of Ruff's B007 (unused-loop-control-variable) with the default `dummy-variable-rgx`: a name bound by a `for` loop's target (itself, or inside tuple/list/starred targets) that does not match `^(_+|(_+[a-zA-Z0-9_]*[a-zA-Z0-9]+?))$` and never occurs as a name expression in the loop body (the `else` clause does not count; attribute members, keyword-argument names, def/class names, parameters, import and global/nonlocal names and except-handler names are not name expressions). The message says `may not be used` when the body calls `locals`/`globals`/`vars`/`exec`/`eval` (by spelling; Ruff checks they are builtins). Match-statement capture, keyword-pattern, star and `as` names are not name expressions either. Reported on the target name.",
7
+ "scope": {
8
+ "include": [
9
+ "**/*"
10
+ ],
11
+ "exclude": []
12
+ },
13
+ "clauses": [
14
+ {
15
+ "id": "shared",
16
+ "define": {
17
+ "language": "python",
18
+ "utils": {
19
+ "in-target": {
20
+ "any": [
21
+ {
22
+ "precedes": {
23
+ "stopBy": "neighbor",
24
+ "regex": "^in$"
25
+ },
26
+ "inside": {
27
+ "stopBy": "neighbor",
28
+ "kind": "for_statement",
29
+ "not": {
30
+ "has": {
31
+ "stopBy": "neighbor",
32
+ "kind": "block",
33
+ "has": {
34
+ "stopBy": "end",
35
+ "kind": "identifier",
36
+ "pattern": "$NAME",
37
+ "not": {
38
+ "matches": "not-a-name"
39
+ }
40
+ }
41
+ }
42
+ }
43
+ }
44
+ },
45
+ {
46
+ "inside": {
47
+ "stopBy": "neighbor",
48
+ "any": [
49
+ {
50
+ "kind": "pattern_list"
51
+ },
52
+ {
53
+ "kind": "tuple_pattern"
54
+ },
55
+ {
56
+ "kind": "list_pattern"
57
+ },
58
+ {
59
+ "kind": "list_splat_pattern"
60
+ },
61
+ {
62
+ "kind": "parenthesized_expression"
63
+ }
64
+ ],
65
+ "matches": "in-target"
66
+ }
67
+ }
68
+ ]
69
+ },
70
+ "magic": {
71
+ "kind": "call",
72
+ "has": {
73
+ "stopBy": "neighbor",
74
+ "kind": "identifier",
75
+ "regex": "^(locals|globals|vars|exec|eval)$",
76
+ "precedes": {
77
+ "stopBy": "neighbor",
78
+ "kind": "argument_list"
79
+ }
80
+ }
81
+ },
82
+ "not-a-name": {
83
+ "any": [
84
+ {
85
+ "follows": {
86
+ "stopBy": "neighbor",
87
+ "regex": "^\\.$"
88
+ }
89
+ },
90
+ {
91
+ "inside": {
92
+ "stopBy": "neighbor",
93
+ "kind": "keyword_argument"
94
+ },
95
+ "precedes": {
96
+ "stopBy": "neighbor",
97
+ "regex": "^=$"
98
+ }
99
+ },
100
+ {
101
+ "follows": {
102
+ "stopBy": "neighbor",
103
+ "regex": "^(def|class)$"
104
+ }
105
+ },
106
+ {
107
+ "inside": {
108
+ "stopBy": "neighbor",
109
+ "any": [
110
+ {
111
+ "kind": "parameters"
112
+ },
113
+ {
114
+ "kind": "lambda_parameters"
115
+ }
116
+ ]
117
+ }
118
+ },
119
+ {
120
+ "inside": {
121
+ "stopBy": "neighbor",
122
+ "any": [
123
+ {
124
+ "kind": "default_parameter"
125
+ },
126
+ {
127
+ "kind": "typed_parameter"
128
+ },
129
+ {
130
+ "kind": "typed_default_parameter"
131
+ }
132
+ ],
133
+ "inside": {
134
+ "stopBy": "neighbor",
135
+ "any": [
136
+ {
137
+ "kind": "parameters"
138
+ },
139
+ {
140
+ "kind": "lambda_parameters"
141
+ }
142
+ ]
143
+ }
144
+ },
145
+ "precedes": {
146
+ "stopBy": "neighbor",
147
+ "regex": "^[=:]$"
148
+ }
149
+ },
150
+ {
151
+ "inside": {
152
+ "stopBy": "neighbor",
153
+ "any": [
154
+ {
155
+ "kind": "list_splat_pattern"
156
+ },
157
+ {
158
+ "kind": "dictionary_splat_pattern"
159
+ }
160
+ ],
161
+ "inside": {
162
+ "stopBy": "neighbor",
163
+ "any": [
164
+ {
165
+ "kind": "parameters"
166
+ },
167
+ {
168
+ "kind": "lambda_parameters"
169
+ },
170
+ {
171
+ "kind": "typed_parameter"
172
+ }
173
+ ]
174
+ }
175
+ }
176
+ },
177
+ {
178
+ "inside": {
179
+ "stopBy": "neighbor",
180
+ "kind": "dotted_name",
181
+ "not": {
182
+ "has": {
183
+ "stopBy": "neighbor",
184
+ "regex": "^\\.$"
185
+ }
186
+ },
187
+ "inside": {
188
+ "stopBy": "neighbor",
189
+ "any": [
190
+ {
191
+ "kind": "case_pattern"
192
+ },
193
+ {
194
+ "kind": "keyword_pattern"
195
+ }
196
+ ]
197
+ }
198
+ }
199
+ },
200
+ {
201
+ "inside": {
202
+ "stopBy": "neighbor",
203
+ "kind": "keyword_pattern"
204
+ },
205
+ "precedes": {
206
+ "stopBy": "neighbor",
207
+ "regex": "^=$"
208
+ }
209
+ },
210
+ {
211
+ "inside": {
212
+ "stopBy": "neighbor",
213
+ "kind": "splat_pattern"
214
+ }
215
+ },
216
+ {
217
+ "follows": {
218
+ "stopBy": "neighbor",
219
+ "regex": "^as$"
220
+ },
221
+ "inside": {
222
+ "stopBy": "neighbor",
223
+ "kind": "as_pattern",
224
+ "inside": {
225
+ "stopBy": "neighbor",
226
+ "kind": "case_pattern"
227
+ }
228
+ }
229
+ },
230
+ {
231
+ "inside": {
232
+ "stopBy": "end",
233
+ "any": [
234
+ {
235
+ "kind": "import_statement"
236
+ },
237
+ {
238
+ "kind": "import_from_statement"
239
+ },
240
+ {
241
+ "kind": "future_import_statement"
242
+ },
243
+ {
244
+ "kind": "global_statement"
245
+ },
246
+ {
247
+ "kind": "nonlocal_statement"
248
+ }
249
+ ]
250
+ }
251
+ },
252
+ {
253
+ "inside": {
254
+ "stopBy": "neighbor",
255
+ "kind": "as_pattern_target",
256
+ "inside": {
257
+ "stopBy": "neighbor",
258
+ "kind": "as_pattern",
259
+ "inside": {
260
+ "stopBy": "neighbor",
261
+ "kind": "except_clause"
262
+ }
263
+ }
264
+ }
265
+ }
266
+ ]
267
+ },
268
+ "uncertain": {
269
+ "inside": {
270
+ "stopBy": {
271
+ "kind": "for_statement"
272
+ },
273
+ "kind": "for_statement",
274
+ "has": {
275
+ "stopBy": "neighbor",
276
+ "kind": "block",
277
+ "has": {
278
+ "stopBy": "end",
279
+ "matches": "magic"
280
+ }
281
+ }
282
+ }
283
+ }
284
+ }
285
+ }
286
+ },
287
+ {
288
+ "id": "unused-loop-control-variable",
289
+ "forbid": {
290
+ "ast": {
291
+ "language": "python",
292
+ "rule": {
293
+ "kind": "identifier",
294
+ "all": [
295
+ {
296
+ "pattern": "$NAME"
297
+ },
298
+ {
299
+ "not": {
300
+ "regex": "^(_+|(_+[a-zA-Z0-9_]*[a-zA-Z0-9]+?))$"
301
+ }
302
+ },
303
+ {
304
+ "matches": "in-target"
305
+ },
306
+ {
307
+ "not": {
308
+ "matches": "uncertain"
309
+ }
310
+ }
311
+ ]
312
+ }
313
+ }
314
+ },
315
+ "violation": {
316
+ "anchor": "witness.span",
317
+ "code": "B007",
318
+ "message": "Loop control variable `$NAME` not used within loop body",
319
+ "suppress": {
320
+ "noqa": {
321
+ "codes": [
322
+ "B007"
323
+ ]
324
+ }
325
+ }
326
+ }
327
+ },
328
+ {
329
+ "id": "unused-loop-control-variable-uncertain",
330
+ "forbid": {
331
+ "ast": {
332
+ "language": "python",
333
+ "rule": {
334
+ "kind": "identifier",
335
+ "all": [
336
+ {
337
+ "pattern": "$NAME"
338
+ },
339
+ {
340
+ "not": {
341
+ "regex": "^(_+|(_+[a-zA-Z0-9_]*[a-zA-Z0-9]+?))$"
342
+ }
343
+ },
344
+ {
345
+ "matches": "in-target"
346
+ },
347
+ {
348
+ "matches": "uncertain"
349
+ }
350
+ ]
351
+ }
352
+ }
353
+ },
354
+ "violation": {
355
+ "anchor": "witness.span",
356
+ "code": "B007",
357
+ "message": "Loop control variable `$NAME` may not be used within loop body",
358
+ "suppress": {
359
+ "noqa": {
360
+ "codes": [
361
+ "B007"
362
+ ]
363
+ }
364
+ }
365
+ }
366
+ }
367
+ ]
368
+ }
@@ -0,0 +1,190 @@
1
+ {
2
+ "format": "rerail.policy/v1",
3
+ "id": "ruff-b009-get-attr-with-constant",
4
+ "revision": 1,
5
+ "mode": "steer",
6
+ "description": "Port of Ruff's B009 (getattr-with-constant): `getattr(obj, \"name\")` with exactly two positional arguments and no keyword arguments, `obj` not starred, the second a str literal (not bytes, an f- or t-string; escapes decoded, implicit concatenations joined) whose value is a Python identifier (Unicode XID, not a keyword) and not a mangled private name (`__x` without a trailing `__`). The callee (parentheses transparent) resolves to the builtin `getattr` (Ruff's `match_builtin_expr`): the unshadowed name, or `getattr` of the `builtins` module through the file's imports. Reported on the call.",
7
+ "scope": {
8
+ "include": [
9
+ "**/*"
10
+ ],
11
+ "exclude": []
12
+ },
13
+ "clauses": [
14
+ {
15
+ "id": "getattr-with-constant",
16
+ "forbid": {
17
+ "ast": {
18
+ "language": "python",
19
+ "utils": {
20
+ "ref-getattr": {
21
+ "any": [
22
+ {
23
+ "kind": "identifier"
24
+ },
25
+ {
26
+ "kind": "attribute"
27
+ }
28
+ ],
29
+ "resolves": {
30
+ "global": [
31
+ "getattr"
32
+ ],
33
+ "import": [
34
+ "builtins.getattr"
35
+ ]
36
+ }
37
+ },
38
+ "callee": {
39
+ "any": [
40
+ {
41
+ "matches": "ref-getattr"
42
+ },
43
+ {
44
+ "kind": "parenthesized_expression",
45
+ "has": {
46
+ "stopBy": "neighbor",
47
+ "matches": "callee"
48
+ }
49
+ }
50
+ ]
51
+ },
52
+ "identifier-literal": {
53
+ "any": [
54
+ {
55
+ "any": [
56
+ {
57
+ "kind": "string",
58
+ "regex": "^[rRuU]{0,2}['\"]"
59
+ },
60
+ {
61
+ "kind": "concatenated_string",
62
+ "not": {
63
+ "has": {
64
+ "stopBy": "neighbor",
65
+ "kind": "string",
66
+ "not": {
67
+ "regex": "^[rRuU]{0,2}['\"]"
68
+ }
69
+ }
70
+ }
71
+ }
72
+ ],
73
+ "value": {
74
+ "regex": "^[\\p{XID_Start}_]\\p{XID_Continue}*$"
75
+ },
76
+ "not": {
77
+ "any": [
78
+ {
79
+ "value": {
80
+ "regex": "^(False|None|True|and|as|assert|async|await|break|class|continue|def|del|elif|else|except|finally|for|from|global|if|import|in|is|lambda|nonlocal|not|or|pass|raise|return|try|while|with|yield)$"
81
+ }
82
+ },
83
+ {
84
+ "all": [
85
+ {
86
+ "value": {
87
+ "regex": "^__"
88
+ }
89
+ },
90
+ {
91
+ "not": {
92
+ "value": {
93
+ "regex": "__$"
94
+ }
95
+ }
96
+ }
97
+ ]
98
+ }
99
+ ]
100
+ }
101
+ },
102
+ {
103
+ "kind": "parenthesized_expression",
104
+ "has": {
105
+ "stopBy": "neighbor",
106
+ "matches": "identifier-literal"
107
+ }
108
+ }
109
+ ]
110
+ },
111
+ "positional": {
112
+ "not": {
113
+ "any": [
114
+ {
115
+ "kind": "keyword_argument"
116
+ },
117
+ {
118
+ "kind": "dictionary_splat"
119
+ },
120
+ {
121
+ "kind": "list_splat"
122
+ }
123
+ ]
124
+ }
125
+ },
126
+ "argument": {
127
+ "not": {
128
+ "any": [
129
+ {
130
+ "kind": "keyword_argument"
131
+ },
132
+ {
133
+ "kind": "dictionary_splat"
134
+ }
135
+ ]
136
+ }
137
+ },
138
+ "no-keywords": {
139
+ "kind": "argument_list",
140
+ "not": {
141
+ "has": {
142
+ "stopBy": "neighbor",
143
+ "any": [
144
+ {
145
+ "kind": "keyword_argument"
146
+ },
147
+ {
148
+ "kind": "dictionary_splat"
149
+ }
150
+ ]
151
+ }
152
+ }
153
+ }
154
+ },
155
+ "rule": {
156
+ "kind": "call",
157
+ "pattern": "$FUNC($OBJ, $NAME)",
158
+ "has": {
159
+ "stopBy": "neighbor",
160
+ "matches": "no-keywords"
161
+ }
162
+ },
163
+ "constraints": {
164
+ "FUNC": {
165
+ "matches": "callee"
166
+ },
167
+ "OBJ": {
168
+ "matches": "positional"
169
+ },
170
+ "NAME": {
171
+ "matches": "identifier-literal"
172
+ }
173
+ }
174
+ }
175
+ },
176
+ "violation": {
177
+ "anchor": "witness.span",
178
+ "code": "B009",
179
+ "message": "Do not call `getattr` with a constant attribute value. It is not any safer than normal property access.",
180
+ "suppress": {
181
+ "noqa": {
182
+ "codes": [
183
+ "B009"
184
+ ]
185
+ }
186
+ }
187
+ }
188
+ }
189
+ ]
190
+ }