npm - @runsec/mcp - Versions diffs - 1.0.1 - Mend

@runsec/mcp 1.0.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (40) hide show

package/dist/index.js +578 -0
package/package.json +43 -0
package/src/rules/data/rule-compliance-map.json +43563 -0
package/src/rules/data/semgrep-rules/README-taint-overlays.md +21 -0
package/src/rules/data/semgrep-rules/advanced-agent-cloud.yaml +802 -0
package/src/rules/data/semgrep-rules/app-logic.yaml +445 -0
package/src/rules/data/semgrep-rules/auth-keycloak.yaml +831 -0
package/src/rules/data/semgrep-rules/browser-agent.yaml +260 -0
package/src/rules/data/semgrep-rules/cloud-secrets.yaml +316 -0
package/src/rules/data/semgrep-rules/csharp-dotnet.yaml +4864 -0
package/src/rules/data/semgrep-rules/desktop-electron-pro.yaml +30 -0
package/src/rules/data/semgrep-rules/desktop-vsto-suite.yaml +2759 -0
package/src/rules/data/semgrep-rules/devops-security.yaml +393 -0
package/src/rules/data/semgrep-rules/domain-access-management.yaml +1023 -0
package/src/rules/data/semgrep-rules/domain-data-privacy.yaml +852 -0
package/src/rules/data/semgrep-rules/domain-input-validation.yaml +2894 -0
package/src/rules/data/semgrep-rules/domain-platform-hardening.yaml +1715 -0
package/src/rules/data/semgrep-rules/ds-ml-security.yaml +2431 -0
package/src/rules/data/semgrep-rules/fastapi-async.yaml +5953 -0
package/src/rules/data/semgrep-rules/frontend-react.yaml +4035 -0
package/src/rules/data/semgrep-rules/frontend-security.yaml +200 -0
package/src/rules/data/semgrep-rules/go-core.yaml +4959 -0
package/src/rules/data/semgrep-rules/hft-cpp-security.yaml +631 -0
package/src/rules/data/semgrep-rules/infra-k8s-helm.yaml +4968 -0
package/src/rules/data/semgrep-rules/integration-security.yaml +2362 -0
package/src/rules/data/semgrep-rules/java-enterprise.yaml +14756 -0
package/src/rules/data/semgrep-rules/java-spring.yaml +397 -0
package/src/rules/data/semgrep-rules/license-compliance.yaml +186 -0
package/src/rules/data/semgrep-rules/mobile-flutter.yaml +37 -0
package/src/rules/data/semgrep-rules/mobile-security.yaml +721 -0
package/src/rules/data/semgrep-rules/nodejs-nestjs.yaml +5164 -0
package/src/rules/data/semgrep-rules/nodejs-security.yaml +326 -0
package/src/rules/data/semgrep-rules/observability.yaml +381 -0
package/src/rules/data/semgrep-rules/php-security.yaml +3601 -0
package/src/rules/data/semgrep-rules/python-backend-pro.yaml +30 -0
package/src/rules/data/semgrep-rules/python-django.yaml +181 -0
package/src/rules/data/semgrep-rules/python-security.yaml +284 -0
package/src/rules/data/semgrep-rules/ru-regulatory.yaml +496 -0
package/src/rules/data/semgrep-rules/ruby-rails.yaml +3078 -0
package/src/rules/data/semgrep-rules/rust-security.yaml +2701 -0

package/src/rules/data/semgrep-rules/mobile-security.yaml ADDED Viewed

@@ -0,0 +1,721 @@
+rules:
+  - id: runsec.mobile-security.mob-001
+    metadata:
+      runsec_version: v1.0
+      confidence: |-
+        0.9
+      exploit_scenario: |-
+        N/A
+      fix_template: |-
+        Use Keystore/Keychain for secrets at rest.
+    pattern-either:
+      - pattern: |-
+          prefs.edit().putString("token", token).apply()
+      - pattern-regex: 'Vulnerable:\\s*MOB\\-001\\b'
+    message: |-
+      RunSec Detection [MOB-001]: CWE-922
+    languages:
+      - generic
+    severity: WARNING
+  - id: runsec.mobile-security.mob-002
+    metadata:
+      runsec_version: v1.0
+      confidence: |-
+        0.9
+      exploit_scenario: |-
+        N/A
+      fix_template: |-
+        Persist auth artifacts only in secure enclave-backed stores.
+    pattern-either:
+      - pattern: |-
+          UserDefaults.standard.set(token, forKey:"token")
+      - pattern-regex: 'Vulnerable:\\s*MOB\\-002\\b'
+    message: |-
+      RunSec Detection [MOB-002]: CWE-922
+    languages:
+      - generic
+    severity: WARNING
+  - id: runsec.mobile-security.mob-003
+    metadata:
+      runsec_version: v1.0
+      confidence: |-
+        0.9
+      exploit_scenario: |-
+        N/A
+      fix_template: |-
+        Encrypt token/PII columns before persistence.
+    pattern-either:
+      - pattern: |-
+          Room entity has refreshToken field
+      - pattern-regex: 'Vulnerable:\\s*MOB\\-003\\b'
+    message: |-
+      RunSec Detection [MOB-003]: CWE-312
+    languages:
+      - generic
+    severity: WARNING
+  - id: runsec.mobile-security.mob-004
+    metadata:
+      runsec_version: v1.0
+      confidence: |-
+        0.9
+      exploit_scenario: |-
+        N/A
+      fix_template: |-
+        Remove hardcoded credentials from app bundle.
+    pattern-either:
+      - pattern: |-
+          credentials in plist/resources
+      - pattern-regex: 'Vulnerable:\\s*MOB\\-004\\b'
+    message: |-
+      RunSec Detection [MOB-004]: CWE-798
+    languages:
+      - generic
+    severity: WARNING
+  - id: runsec.mobile-security.mob-005
+    metadata:
+      runsec_version: v1.0
+      confidence: |-
+        0.9
+      exploit_scenario: |-
+        N/A
+      fix_template: |-
+        Enforce pinset with rotation support.
+    pattern-either:
+      - pattern: |-
+          default trust chain only for high-risk API
+      - pattern-regex: 'Vulnerable:\\s*MOB\\-005\\b'
+    message: |-
+      RunSec Detection [MOB-005]: CWE-295
+    languages:
+      - generic
+    severity: WARNING
+  - id: runsec.mobile-security.mob-006
+    metadata:
+      runsec_version: v1.0
+      confidence: |-
+        0.9
+      exploit_scenario: |-
+        N/A
+      fix_template: |-
+        Reject untrusted certificates.
+    pattern-either:
+      - pattern: |-
+          checkServerTrusted(...) {}
+      - pattern-regex: 'Vulnerable:\\s*MOB\\-006\\b'
+    message: |-
+      RunSec Detection [MOB-006]: CWE-295
+    languages:
+      - generic
+    severity: WARNING
+  - id: runsec.mobile-security.mob-007
+    metadata:
+      runsec_version: v1.0
+      confidence: |-
+        0.9
+      exploit_scenario: |-
+        N/A
+      fix_template: |-
+        Require strong server trust evaluation.
+    pattern-either:
+      - pattern: |-
+          .disableEvaluation in ServerTrustManager
+      - pattern-regex: 'Vulnerable:\\s*MOB\\-007\\b'
+    message: |-
+      RunSec Detection [MOB-007]: CWE-295
+    languages:
+      - generic
+    severity: WARNING
+  - id: runsec.mobile-security.mob-008
+    metadata:
+      runsec_version: v1.0
+      confidence: |-
+        0.9
+      exploit_scenario: |-
+        N/A
+      fix_template: |-
+        Prevent debug trust exceptions in release builds.
+    pattern-either:
+      - pattern: |-
+          if (BuildConfig.DEBUG) skipPinning() leaked to prod
+      - pattern-regex: 'Vulnerable:\\s*MOB\\-008\\b'
+    message: |-
+      RunSec Detection [MOB-008]: CWE-489
+    languages:
+      - generic
+    severity: WARNING
+  - id: runsec.mobile-security.mob-009
+    metadata:
+      runsec_version: v1.0
+      confidence: |-
+        0.9
+      exploit_scenario: |-
+        N/A
+      fix_template: |-
+        Support crypto agility for pin changes.
+    pattern-either:
+      - pattern: |-
+          static pin forever
+      - pattern-regex: 'Vulnerable:\\s*MOB\\-009\\b'
+    message: |-
+      RunSec Detection [MOB-009]: CWE-327
+    languages:
+      - generic
+    severity: WARNING
+  - id: runsec.mobile-security.mob-010
+    metadata:
+      runsec_version: v1.0
+      confidence: |-
+        0.9
+      exploit_scenario: |-
+        N/A
+      fix_template: |-
+        Bind biometric result to signed nonce.
+    pattern-either:
+      - pattern: |-
+          accept auth on callback without result checks
+      - pattern-regex: 'Vulnerable:\\s*MOB\\-010\\b'
+    message: |-
+      RunSec Detection [MOB-010]: CWE-287
+    languages:
+      - generic
+    severity: WARNING
+  - id: runsec.mobile-security.mob-011
+    metadata:
+      runsec_version: v1.0
+      confidence: |-
+        0.9
+      exploit_scenario: |-
+        N/A
+      fix_template: |-
+        Fail closed on biometric errors.
+    pattern-either:
+      - pattern: |-
+          failure callback logs only, continues flow
+      - pattern-regex: 'Vulnerable:\\s*MOB\\-011\\b'
+    message: |-
+      RunSec Detection [MOB-011]: CWE-287
+    languages:
+      - generic
+    severity: WARNING
+  - id: runsec.mobile-security.mob-012
+    metadata:
+      runsec_version: v1.0
+      confidence: |-
+        0.9
+      exploit_scenario: |-
+        N/A
+      fix_template: |-
+        Use strong biometric/device credential policy.
+    pattern-either:
+      - pattern: |-
+          allow weak fallback for high-risk action
+      - pattern-regex: 'Vulnerable:\\s*MOB\\-012\\b'
+    message: |-
+      RunSec Detection [MOB-012]: CWE-307
+    languages:
+      - generic
+    severity: WARNING
+  - id: runsec.mobile-security.mob-013
+    metadata:
+      runsec_version: v1.0
+      confidence: |-
+        0.9
+      exploit_scenario: |-
+        N/A
+      fix_template: |-
+        Prevent replay of authentication state.
+    pattern-either:
+      - pattern: |-
+          LAContext evaluated but token issued later without binding
+      - pattern-regex: 'Vulnerable:\\s*MOB\\-013\\b'
+    message: |-
+      RunSec Detection [MOB-013]: CWE-345
+    languages:
+      - generic
+    severity: WARNING
+  - id: runsec.mobile-security.mob-014
+    metadata:
+      runsec_version: v1.0
+      confidence: |-
+        0.9
+      exploit_scenario: |-
+        N/A
+      fix_template: |-
+        Minimize secret lifetime in memory.
+    pattern-either:
+      - pattern: |-
+          val pin = "1234"/String secrets
+      - pattern-regex: 'Vulnerable:\\s*MOB\\-014\\b'
+    message: |-
+      RunSec Detection [MOB-014]: CWE-1037
+    languages:
+      - generic
+    severity: WARNING
+  - id: runsec.mobile-security.mob-015
+    metadata:
+      runsec_version: v1.0
+      confidence: |-
+        0.9
+      exploit_scenario: |-
+        N/A
+      fix_template: |-
+        Prevent accidental secret exfiltration.
+    pattern-either:
+      - pattern: |-
+          copy token/password to clipboard
+      - pattern-regex: 'Vulnerable:\\s*MOB\\-015\\b'
+    message: |-
+      RunSec Detection [MOB-015]: CWE-200
+    languages:
+      - generic
+    severity: WARNING
+  - id: runsec.mobile-security.mob-016
+    metadata:
+      runsec_version: v1.0
+      confidence: |-
+        0.9
+      exploit_scenario: |-
+        N/A
+      fix_template: |-
+        Limit WebView bridge attack surface.
+    pattern-either:
+      - pattern: |-
+          addJavascriptInterface without origin controls
+      - pattern-regex: 'Vulnerable:\\s*MOB\\-016\\b'
+    message: |-
+      RunSec Detection [MOB-016]: CWE-749
+    languages:
+      - generic
+    severity: WARNING
+  - id: runsec.mobile-security.mob-017
+    metadata:
+      runsec_version: v1.0
+      confidence: |-
+        0.9
+      exploit_scenario: |-
+        N/A
+      fix_template: |-
+        Block mixed content downgrade.
+    pattern-either:
+      - pattern: |-
+          allow HTTP subresources
+      - pattern-regex: 'Vulnerable:\\s*MOB\\-017\\b'
+    message: |-
+      RunSec Detection [MOB-017]: CWE-319
+    languages:
+      - generic
+    severity: WARNING
+  - id: runsec.mobile-security.mob-018
+    metadata:
+      runsec_version: v1.0
+      confidence: |-
+        0.9
+      exploit_scenario: |-
+        N/A
+      fix_template: |-
+        Prevent runtime introspection in production.
+    pattern-either:
+      - pattern: |-
+          android:debuggable="true"
+      - pattern-regex: 'Vulnerable:\\s*MOB\\-018\\b'
+    message: |-
+      RunSec Detection [MOB-018]: CWE-489
+    languages:
+      - generic
+    severity: WARNING
+  - id: runsec.mobile-security.mob-019
+    metadata:
+      runsec_version: v1.0
+      confidence: |-
+        0.9
+      exploit_scenario: |-
+        N/A
+      fix_template: |-
+        Add runtime integrity checks for sensitive flows.
+    pattern-either:
+      - pattern: |-
+          no jailbreak checks before payment action
+      - pattern-regex: 'Vulnerable:\\s*MOB\\-019\\b'
+    message: |-
+      RunSec Detection [MOB-019]: CWE-693
+    languages:
+      - generic
+    severity: WARNING
+  - id: runsec.mobile-security.mob-020
+    metadata:
+      runsec_version: v1.0
+      confidence: |-
+        0.9
+      exploit_scenario: |-
+        N/A
+      fix_template: |-
+        Restrict critical actions on rooted devices.
+    pattern-either:
+      - pattern: |-
+          no root checks before transfer
+      - pattern-regex: 'Vulnerable:\\s*MOB\\-020\\b'
+    message: |-
+      RunSec Detection [MOB-020]: CWE-693
+    languages:
+      - generic
+    severity: WARNING
+  - id: runsec.mobile-security.mob-021
+    metadata:
+      runsec_version: v1.0
+      confidence: |-
+        0.9
+      exploit_scenario: |-
+        N/A
+      fix_template: |-
+        Add anti-debug checks for critical paths.
+    pattern-either:
+      - pattern: |-
+          no debugger checks in sensitive workflow
+      - pattern-regex: 'Vulnerable:\\s*MOB\\-021\\b'
+    message: |-
+      RunSec Detection [MOB-021]: CWE-489
+    languages:
+      - generic
+    severity: WARNING
+  - id: runsec.mobile-security.mob-022
+    metadata:
+      runsec_version: v1.0
+      confidence: |-
+        0.9
+      exploit_scenario: |-
+        N/A
+      fix_template: |-
+        Protect endpoint integrity.
+    pattern-either:
+      - pattern: |-
+          base URL in mutable plain config
+      - pattern-regex: 'Vulnerable:\\s*MOB\\-022\\b'
+    message: |-
+      RunSec Detection [MOB-022]: CWE-346
+    languages:
+      - generic
+    severity: WARNING
+  - id: runsec.mobile-security.mob-023
+    metadata:
+      runsec_version: v1.0
+      confidence: |-
+        0.9
+      exploit_scenario: |-
+        N/A
+      fix_template: |-
+        Validate deep links before navigation/actions.
+    pattern-either:
+      - pattern: |-
+          accepts arbitrary URI host/path
+      - pattern-regex: 'Vulnerable:\\s*MOB\\-023\\b'
+    message: |-
+      RunSec Detection [MOB-023]: CWE-939
+    languages:
+      - generic
+    severity: WARNING
+  - id: runsec.mobile-security.mob-024
+    metadata:
+      runsec_version: v1.0
+      confidence: |-
+        0.9
+      exploit_scenario: |-
+        N/A
+      fix_template: |-
+        Restrict component exposure.
+    pattern-either:
+      - pattern: |-
+          exported activity/service handles sensitive intents
+      - pattern-regex: 'Vulnerable:\\s*MOB\\-024\\b'
+    message: |-
+      RunSec Detection [MOB-024]: CWE-926
+    languages:
+      - generic
+    severity: WARNING
+  - id: runsec.mobile-security.mob-025
+    metadata:
+      runsec_version: v1.0
+      confidence: |-
+        0.9
+      exploit_scenario: |-
+        N/A
+      fix_template: |-
+        Authenticate inter-app communication.
+    pattern-either:
+      - pattern: |-
+          trust any URL invocation
+      - pattern-regex: 'Vulnerable:\\s*MOB\\-025\\b'
+    message: |-
+      RunSec Detection [MOB-025]: CWE-346
+    languages:
+      - generic
+    severity: WARNING
+  - id: runsec.mobile-security.mob-026
+    metadata:
+      runsec_version: v1.0
+      confidence: |-
+        0.9
+      exploit_scenario: |-
+        N/A
+      fix_template: |-
+        Block shoulder-surfing/screenshot leaks.
+    pattern-either:
+      - pattern: |-
+          no secure flag for secrets
+      - pattern-regex: 'Vulnerable:\\s*MOB\\-026\\b'
+    message: |-
+      RunSec Detection [MOB-026]: CWE-200
+    languages:
+      - generic
+    severity: WARNING
+  - id: runsec.mobile-security.mob-027
+    metadata:
+      runsec_version: v1.0
+      confidence: |-
+        0.9
+      exploit_scenario: |-
+        N/A
+      fix_template: |-
+        Avoid secret disclosure via logs.
+    pattern-either:
+      - pattern: |-
+          Log.d("auth", token)
+      - pattern-regex: 'Vulnerable:\\s*MOB\\-027\\b'
+    message: |-
+      RunSec Detection [MOB-027]: CWE-532
+    languages:
+      - generic
+    severity: WARNING
+  - id: runsec.mobile-security.mob-028
+    metadata:
+      runsec_version: v1.0
+      confidence: |-
+        0.9
+      exploit_scenario: |-
+        N/A
+      fix_template: |-
+        Keep sensitive data off push channels.
+    pattern-either:
+      - pattern: |-
+          full token/account data in notification
+      - pattern-regex: 'Vulnerable:\\s*MOB\\-028\\b'
+    message: |-
+      RunSec Detection [MOB-028]: CWE-359
+    languages:
+      - generic
+    severity: WARNING
+  - id: runsec.mobile-security.mob-029
+    metadata:
+      runsec_version: v1.0
+      confidence: |-
+        0.9
+      exploit_scenario: |-
+        N/A
+      fix_template: |-
+        Generate cryptographically strong nonces.
+    pattern-either:
+      - pattern: |-
+          Random() for auth nonce
+      - pattern-regex: 'Vulnerable:\\s*MOB\\-029\\b'
+    message: |-
+      RunSec Detection [MOB-029]: CWE-330
+    languages:
+      - generic
+    severity: WARNING
+  - id: runsec.mobile-security.mob-030
+    metadata:
+      runsec_version: v1.0
+      confidence: |-
+        0.9
+      exploit_scenario: |-
+        N/A
+      fix_template: |-
+        Prevent request replay abuse.
+    pattern-either:
+      - pattern: |-
+          no nonce/timestamp/signature
+      - pattern-regex: 'Vulnerable:\\s*MOB\\-030\\b'
+    message: |-
+      RunSec Detection [MOB-030]: CWE-294
+    languages:
+      - generic
+    severity: WARNING
+  - id: runsec.mobile-security.mob-031
+    metadata:
+      runsec_version: v1.0
+      confidence: |-
+        0.9
+      exploit_scenario: |-
+        N/A
+      fix_template: |-
+        Protect local cache confidentiality.
+    pattern-either:
+      - pattern: |-
+          decrypted JSON persisted in cache
+      - pattern-regex: 'Vulnerable:\\s*MOB\\-031\\b'
+    message: |-
+      RunSec Detection [MOB-031]: CWE-312
+    languages:
+      - generic
+    severity: WARNING
+  - id: runsec.mobile-security.mob-032
+    metadata:
+      runsec_version: v1.0
+      confidence: |-
+        0.9
+      exploit_scenario: |-
+        N/A
+      fix_template: |-
+        Never downgrade secure transport.
+    pattern-either:
+      - pattern: |-
+          retry via http:// when HTTPS fails
+      - pattern-regex: 'Vulnerable:\\s*MOB\\-032\\b'
+    message: |-
+      RunSec Detection [MOB-032]: CWE-319
+    languages:
+      - generic
+    severity: WARNING
+  - id: runsec.mobile-security.mob-033
+    metadata:
+      runsec_version: v1.0
+      confidence: |-
+        0.9
+      exploit_scenario: |-
+        N/A
+      fix_template: |-
+        Enforce robust TLS validation.
+    pattern-either:
+      - pattern: |-
+          trust challenge blindly
+      - pattern-regex: 'Vulnerable:\\s*MOB\\-033\\b'
+    message: |-
+      RunSec Detection [MOB-033]: CWE-295
+    languages:
+      - generic
+    severity: WARNING
+  - id: runsec.mobile-security.mob-034
+    metadata:
+      runsec_version: v1.0
+      confidence: |-
+        0.9
+      exploit_scenario: |-
+        N/A
+      fix_template: |-
+        Prevent remote disabling of protections.
+    pattern-either:
+      - pattern: |-
+          remote flag can disable integrity
+      - pattern-regex: 'Vulnerable:\\s*MOB\\-034\\b'
+    message: |-
+      RunSec Detection [MOB-034]: CWE-693
+    languages:
+      - generic
+    severity: WARNING
+  - id: runsec.mobile-security.mob-035
+    metadata:
+      runsec_version: v1.0
+      confidence: |-
+        0.9
+      exploit_scenario: |-
+        N/A
+      fix_template: |-
+        Synchronize token renewal safely.
+    pattern-either:
+      - pattern: |-
+          concurrent refresh requests overwrite state
+      - pattern-regex: 'Vulnerable:\\s*MOB\\-035\\b'
+    message: |-
+      RunSec Detection [MOB-035]: CWE-367
+    languages:
+      - generic
+    severity: WARNING
+  - id: runsec.mobile-security.mob-036
+    metadata:
+      runsec_version: v1.0
+      confidence: |-
+        0.9
+      exploit_scenario: |-
+        N/A
+      fix_template: |-
+        Tighten keychain accessibility scope.
+    pattern-either:
+      - pattern: |-
+          kSecAttrAccessibleAlways for secrets
+      - pattern-regex: 'Vulnerable:\\s*MOB\\-036\\b'
+    message: |-
+      RunSec Detection [MOB-036]: CWE-732
+    languages:
+      - generic
+    severity: WARNING
+  - id: runsec.mobile-security.mob-037
+    metadata:
+      runsec_version: v1.0
+      confidence: |-
+        0.9
+      exploit_scenario: |-
+        N/A
+      fix_template: |-
+        Avoid secret exfil via backups.
+    pattern-either:
+      - pattern: |-
+          allowBackup=true with tokens stored locally
+      - pattern-regex: 'Vulnerable:\\s*MOB\\-037\\b'
+    message: |-
+      RunSec Detection [MOB-037]: CWE-312
+    languages:
+      - generic
+    severity: WARNING
+  - id: runsec.mobile-security.mob-038
+    metadata:
+      runsec_version: v1.0
+      confidence: |-
+        0.9
+      exploit_scenario: |-
+        N/A
+      fix_template: |-
+        Reduce static analysis attack surface.
+    pattern-either:
+      - pattern: |-
+          reverse engineering made trivial
+      - pattern-regex: 'Vulnerable:\\s*MOB\\-038\\b'
+    message: |-
+      RunSec Detection [MOB-038]: CWE-656
+    languages:
+      - generic
+    severity: WARNING
+  - id: runsec.mobile-security.mob-039
+    metadata:
+      runsec_version: v1.0
+      confidence: |-
+        0.9
+      exploit_scenario: |-
+        N/A
+      fix_template: |-
+        Add runtime anti-tamper controls.
+    pattern-either:
+      - pattern: |-
+          no Frida/hook heuristics
+      - pattern-regex: 'Vulnerable:\\s*MOB\\-039\\b'
+    message: |-
+      RunSec Detection [MOB-039]: CWE-693
+    languages:
+      - generic
+    severity: WARNING
+  - id: runsec.mobile-security.mob-040
+    metadata:
+      runsec_version: v1.0
+      confidence: |-
+        0.9
+      exploit_scenario: |-
+        N/A
+      fix_template: |-
+        Eliminate embedded long-term secrets.
+    pattern-either:
+      - pattern: |-
+          API keys in strings.xml/Swift constants
+      - pattern-regex: 'Vulnerable:\\s*MOB\\-040\\b'
+    message: |-
+      RunSec Detection [MOB-040]: CWE-798
+    languages:
+      - generic
+    severity: WARNING