@neralabs/rerail-pack-python 0.1.1

package/rules/ruff-sim112-uncapitalized-environment-variables.json

@@ -0,0 +1,168 @@
+{
+  "format": "rerail.policy/v1",
+  "id": "ruff-sim112-uncapitalized-environment-variables",
+  "revision": 1,
+  "mode": "steer",
+  "description": "Port of Ruff's SIM112 (uncapitalized-environment-variables): a str literal (not bytes, an f- or t-string; escapes decoded, implicit concatenations joined) whose value has an ASCII lowercase letter, other than `https_proxy`/`http_proxy`/`no_proxy`, used as `os.environ[...]` or as the first argument of a call resolving to `os.environ.get`/`os.getenv`, after Ruff's traversal has visited an absolute import of `os` (M10a `resolves.seenBefore`). Reported on the string.",
+  "scope": {
+    "include": [
+      "**/*"
+    ],
+    "exclude": []
+  },
+  "clauses": [
+    {
+      "id": "uncapitalized-environment-variables",
+      "forbid": {
+        "ast": {
+          "language": "python",
+          "utils": {
+            "env-string": {
+              "any": [
+                {
+                  "kind": "string",
+                  "regex": "^[uUrR]{0,2}['\"]"
+                },
+                {
+                  "kind": "concatenated_string",
+                  "not": {
+                    "has": {
+                      "stopBy": "neighbor",
+                      "kind": "string",
+                      "not": {
+                        "regex": "^[uUrR]{0,2}['\"]"
+                      }
+                    }
+                  }
+                }
+              ],
+              "value": {
+                "regex": "[a-z]"
+              },
+              "not": {
+                "value": {
+                  "regex": "^(https_proxy|http_proxy|no_proxy)$"
+                }
+              }
+            },
+            "env-slot": {
+              "any": [
+                {
+                  "follows": {
+                    "stopBy": "neighbor",
+                    "regex": "^[(\\[]$"
+                  },
+                  "inside": {
+                    "stopBy": "neighbor",
+                    "any": [
+                      {
+                        "kind": "argument_list",
+                        "inside": {
+                          "stopBy": "neighbor",
+                          "matches": "env-call"
+                        }
+                      },
+                      {
+                        "kind": "subscript",
+                        "has": {
+                          "stopBy": "neighbor",
+                          "kind": "attribute",
+                          "regex": "^os\\s*\\.\\s*environ$",
+                          "not": {
+                            "follows": {
+                              "stopBy": "neighbor",
+                              "regex": "(?s)."
+                            }
+                          }
+                        }
+                      }
+                    ]
+                  }
+                },
+                {
+                  "inside": {
+                    "stopBy": "neighbor",
+                    "kind": "parenthesized_expression",
+                    "matches": "env-slot"
+                  }
+                }
+              ]
+            },
+            "env-call": {
+              "kind": "call",
+              "has": {
+                "stopBy": "neighbor",
+                "not": {
+                  "follows": {
+                    "stopBy": "neighbor",
+                    "regex": "(?s)."
+                  }
+                },
+                "any": [
+                  {
+                    "kind": "identifier"
+                  },
+                  {
+                    "kind": "attribute"
+                  }
+                ],
+                "resolves": {
+                  "import": [
+                    "os.environ.get",
+                    "os.getenv"
+                  ]
+                }
+              }
+            }
+          },
+          "rule": {
+            "any": [
+              {
+                "any": [
+                  {
+                    "kind": "string"
+                  },
+                  {
+                    "kind": "concatenated_string"
+                  }
+                ]
+              }
+            ],
+            "not": {
+              "inside": {
+                "stopBy": "neighbor",
+                "kind": "concatenated_string"
+              }
+            },
+            "all": [
+              {
+                "matches": "env-string"
+              },
+              {
+                "matches": "env-slot"
+              }
+            ],
+            "resolves": {
+              "imported": [
+                "os"
+              ],
+              "seenBefore": true
+            }
+          }
+        }
+      },
+      "violation": {
+        "anchor": "witness.span",
+        "code": "SIM112",
+        "message": "Use capitalized environment variable",
+        "suppress": {
+          "noqa": {
+            "codes": [
+              "SIM112"
+            ]
+          }
+        }
+      }
+    }
+  ]
+}