LICENSE
MANIFEST.in
README.md
pyproject.toml
inference/__init__.py
inference/__main__.py
inference/cli.py
inference/compliance_enrichment.py
inference/fakes.py
inference/l1_runner.py
inference/lsp_server.py
inference/mapping.py
inference/merge.py
inference/pipeline.py
inference/provenance.py
inference/regions.py
inference/sarif_run.py
inference/sources.py
inference/_rules/__init__.py
inference/_rules/c/metadata/c.buffer-overflow.scanf-no-width.json
inference/_rules/c/metadata/c.command-injection.popen-dynamic.json
inference/_rules/c/metadata/c.dangerous-call.gets-usage.json
inference/_rules/c/metadata/c.dangerous-call.sprintf-usage.json
inference/_rules/c/metadata/c.dangerous-call.strcat-usage.json
inference/_rules/c/metadata/c.dangerous-call.strcpy-usage.json
inference/_rules/c/metadata/c.format-string.direct-arg-fprintf.json
inference/_rules/c/metadata/c.format-string.direct-printf.json
inference/_rules/c/metadata/c.integer-overflow.malloc-add.json
inference/_rules/c/metadata/c.integer-overflow.malloc-mult.json
inference/_rules/c/metadata/c.reclaim.calloc-no-null-check.json
inference/_rules/c/metadata/c.reclaim.command-injection-taint.json
inference/_rules/c/metadata/c.reclaim.format-string-taint.json
inference/_rules/c/metadata/c.reclaim.memcpy-user-size.json
inference/_rules/c/metadata/c.reclaim.system-concat.json
inference/_rules/c/metadata/c.reclaim.user-controlled-alloc.json
inference/_rules/c/metadata/c.weak-crypto.des-usage.json
inference/_rules/c/metadata/c.weak-crypto.hardcoded-key-bytes.json
inference/_rules/c/metadata/c.weak-crypto.hardcoded-key-string.json
inference/_rules/c/metadata/c.weak-crypto.insecure-random.json
inference/_rules/c/metadata/c.weak-crypto.md5-usage.json
inference/_rules/c/metadata/c.weak-crypto.sha1-usage.json
inference/_rules/c/queries/c.buffer-overflow.scanf-no-width.scm
inference/_rules/c/queries/c.command-injection.popen-dynamic.scm
inference/_rules/c/queries/c.dangerous-call.gets-usage.scm
inference/_rules/c/queries/c.dangerous-call.sprintf-usage.scm
inference/_rules/c/queries/c.dangerous-call.strcat-usage.scm
inference/_rules/c/queries/c.dangerous-call.strcpy-usage.scm
inference/_rules/c/queries/c.format-string.direct-arg-fprintf.scm
inference/_rules/c/queries/c.format-string.direct-printf.scm
inference/_rules/c/queries/c.integer-overflow.malloc-add.scm
inference/_rules/c/queries/c.integer-overflow.malloc-mult.scm
inference/_rules/c/queries/c.reclaim.calloc-no-null-check.guard.scm
inference/_rules/c/queries/c.reclaim.calloc-no-null-check.scm
inference/_rules/c/queries/c.reclaim.calloc-no-null-check.scope.scm
inference/_rules/c/queries/c.reclaim.command-injection-taint.sanitizer.scm
inference/_rules/c/queries/c.reclaim.command-injection-taint.scm
inference/_rules/c/queries/c.reclaim.command-injection-taint.sink.scm
inference/_rules/c/queries/c.reclaim.command-injection-taint.source.scm
inference/_rules/c/queries/c.reclaim.format-string-taint.scm
inference/_rules/c/queries/c.reclaim.format-string-taint.sink.scm
inference/_rules/c/queries/c.reclaim.format-string-taint.source.scm
inference/_rules/c/queries/c.reclaim.memcpy-user-size.sanitizer.scm
inference/_rules/c/queries/c.reclaim.memcpy-user-size.scm
inference/_rules/c/queries/c.reclaim.memcpy-user-size.sink.scm
inference/_rules/c/queries/c.reclaim.memcpy-user-size.source.scm
inference/_rules/c/queries/c.reclaim.system-concat.scm
inference/_rules/c/queries/c.reclaim.system-concat.sink.scm
inference/_rules/c/queries/c.reclaim.system-concat.source.scm
inference/_rules/c/queries/c.reclaim.user-controlled-alloc.sanitizer.scm
inference/_rules/c/queries/c.reclaim.user-controlled-alloc.scm
inference/_rules/c/queries/c.reclaim.user-controlled-alloc.sink.scm
inference/_rules/c/queries/c.reclaim.user-controlled-alloc.source.scm
inference/_rules/c/queries/c.weak-crypto.des-usage.scm
inference/_rules/c/queries/c.weak-crypto.hardcoded-key-bytes.scm
inference/_rules/c/queries/c.weak-crypto.hardcoded-key-string.scm
inference/_rules/c/queries/c.weak-crypto.insecure-random.scm
inference/_rules/c/queries/c.weak-crypto.md5-usage.scm
inference/_rules/c/queries/c.weak-crypto.sha1-usage.scm
inference/_rules/c_sharp/metadata/c_sharp.cleartext-storage.efcore-creditcard.json
inference/_rules/c_sharp/metadata/c_sharp.cleartext-storage.efcore-dob.json
inference/_rules/c_sharp/metadata/c_sharp.cleartext-storage.efcore-medical.json
inference/_rules/c_sharp/metadata/c_sharp.cleartext-storage.efcore-ssn-column.json
inference/_rules/c_sharp/metadata/c_sharp.cleartext-storage.efcore-ssn-property.json
inference/_rules/c_sharp/metadata/c_sharp.cmd-injection.process-start.json
inference/_rules/c_sharp/metadata/c_sharp.code-injection.assembly-load.json
inference/_rules/c_sharp/metadata/c_sharp.code-injection.codedom-compilation.json
inference/_rules/c_sharp/metadata/c_sharp.code-injection.roslyn-script-eval.json
inference/_rules/c_sharp/metadata/c_sharp.cra.network-impact-resilience.json
inference/_rules/c_sharp/metadata/c_sharp.cra.secure-update-channel.json
inference/_rules/c_sharp/metadata/c_sharp.csrf.ignore-antiforgery-token.json
inference/_rules/c_sharp/metadata/c_sharp.csrf.protection-disabled.json
inference/_rules/c_sharp/metadata/c_sharp.deserialization.binaryformatter.json
inference/_rules/c_sharp/metadata/c_sharp.deserialization.javascriptserializer-typeresolver.json
inference/_rules/c_sharp/metadata/c_sharp.deserialization.json-typenamehandling.json
inference/_rules/c_sharp/metadata/c_sharp.hardcoded-secret.password-field.json
inference/_rules/c_sharp/metadata/c_sharp.open-redirect.redirect-from-request.json
inference/_rules/c_sharp/metadata/c_sharp.path-traversal.file-from-request.json
inference/_rules/c_sharp/metadata/c_sharp.path-traversal.path-combine-from-request.json
inference/_rules/c_sharp/metadata/c_sharp.prompt-injection.anthropic-message.json
inference/_rules/c_sharp/metadata/c_sharp.prompt-injection.azure-openai-message.json
inference/_rules/c_sharp/metadata/c_sharp.prompt-injection.semantic-kernel-invoke.json
inference/_rules/c_sharp/metadata/c_sharp.reclaim.csrf-no-antiforgery.json
inference/_rules/c_sharp/metadata/c_sharp.reclaim.excessive-agency-destructive-sql-aoai.json
inference/_rules/c_sharp/metadata/c_sharp.reclaim.excessive-agency-destructive-sql-sk.json
inference/_rules/c_sharp/metadata/c_sharp.reclaim.excessive-agency-file-delete-aoai.json
inference/_rules/c_sharp/metadata/c_sharp.reclaim.excessive-agency-file-delete-sk.json
inference/_rules/c_sharp/metadata/c_sharp.reclaim.excessive-agency-shell-tool-aoai.json
inference/_rules/c_sharp/metadata/c_sharp.reclaim.excessive-agency-shell-tool-sk.json
inference/_rules/c_sharp/metadata/c_sharp.reclaim.idor-ef-find.json
inference/_rules/c_sharp/metadata/c_sharp.reclaim.idor-horizontal-escalation.json
inference/_rules/c_sharp/metadata/c_sharp.reclaim.missing-auth-aspnet-endpoint.json
inference/_rules/c_sharp/metadata/c_sharp.reclaim.nydfs-mfa-check-password-async.json
inference/_rules/c_sharp/metadata/c_sharp.reclaim.nydfs-mfa-check-password-signin.json
inference/_rules/c_sharp/metadata/c_sharp.reclaim.nydfs-mfa-password-signin.json
inference/_rules/c_sharp/metadata/c_sharp.reclaim.xxe-xmldocument.json
inference/_rules/c_sharp/metadata/c_sharp.reclaim.xxe-xmltextreader.json
inference/_rules/c_sharp/metadata/c_sharp.sensitive-data-logging.console-secret-pattern.json
inference/_rules/c_sharp/metadata/c_sharp.sensitive-data.secret-in-prompt.json
inference/_rules/c_sharp/metadata/c_sharp.sensitive-data.ssn-in-prompt.json
inference/_rules/c_sharp/metadata/c_sharp.sensitive-data.ssn-literal-in-prompt.json
inference/_rules/c_sharp/metadata/c_sharp.sqli.commandtext-concat.json
inference/_rules/c_sharp/metadata/c_sharp.sqli.string-concat.json
inference/_rules/c_sharp/metadata/c_sharp.ssrf.request-to-httpclient.json
inference/_rules/c_sharp/metadata/c_sharp.ssrf.restrequest-from-request.json
inference/_rules/c_sharp/metadata/c_sharp.ssrf.webrequest-create-from-request.json
inference/_rules/c_sharp/metadata/c_sharp.weak-crypto.des-cipher.json
inference/_rules/c_sharp/metadata/c_sharp.weak-crypto.insecure-random.json
inference/_rules/c_sharp/metadata/c_sharp.weak-crypto.md5.json
inference/_rules/c_sharp/metadata/c_sharp.weak-crypto.rc2.json
inference/_rules/c_sharp/metadata/c_sharp.weak-crypto.rijndael-deprecated.json
inference/_rules/c_sharp/metadata/c_sharp.weak-crypto.sha1.json
inference/_rules/c_sharp/metadata/c_sharp.xpath-injection.string-concat.json
inference/_rules/c_sharp/metadata/c_sharp.xss.html-raw.json
inference/_rules/c_sharp/metadata/c_sharp.xss.response-write.json
inference/_rules/c_sharp/metadata/c_sharp.xxe.dtd-processing-parse.json
inference/_rules/c_sharp/metadata/smoke.c_sharp.dangerous-call.json
inference/_rules/c_sharp/queries/c_sharp.cleartext-storage.efcore-creditcard.scm
inference/_rules/c_sharp/queries/c_sharp.cleartext-storage.efcore-dob.scm
inference/_rules/c_sharp/queries/c_sharp.cleartext-storage.efcore-medical.scm
inference/_rules/c_sharp/queries/c_sharp.cleartext-storage.efcore-ssn-column.scm
inference/_rules/c_sharp/queries/c_sharp.cleartext-storage.efcore-ssn-property.scm
inference/_rules/c_sharp/queries/c_sharp.cmd-injection.process-start.scm
inference/_rules/c_sharp/queries/c_sharp.code-injection.assembly-load.scm
inference/_rules/c_sharp/queries/c_sharp.code-injection.codedom-compilation.scm
inference/_rules/c_sharp/queries/c_sharp.code-injection.roslyn-script-eval.scm
inference/_rules/c_sharp/queries/c_sharp.cra.network-impact-resilience.scm
inference/_rules/c_sharp/queries/c_sharp.cra.secure-update-channel.scm
inference/_rules/c_sharp/queries/c_sharp.csrf.ignore-antiforgery-token.scm
inference/_rules/c_sharp/queries/c_sharp.csrf.protection-disabled.scm
inference/_rules/c_sharp/queries/c_sharp.deserialization.binaryformatter.scm
inference/_rules/c_sharp/queries/c_sharp.deserialization.javascriptserializer-typeresolver.scm
inference/_rules/c_sharp/queries/c_sharp.deserialization.json-typenamehandling.scm
inference/_rules/c_sharp/queries/c_sharp.hardcoded-secret.password-field.scm
inference/_rules/c_sharp/queries/c_sharp.open-redirect.redirect-from-request.scm
inference/_rules/c_sharp/queries/c_sharp.path-traversal.file-from-request.scm
inference/_rules/c_sharp/queries/c_sharp.path-traversal.path-combine-from-request.scm
inference/_rules/c_sharp/queries/c_sharp.prompt-injection.anthropic-message.scm
inference/_rules/c_sharp/queries/c_sharp.prompt-injection.azure-openai-message.scm
inference/_rules/c_sharp/queries/c_sharp.prompt-injection.semantic-kernel-invoke.scm
inference/_rules/c_sharp/queries/c_sharp.reclaim.csrf-no-antiforgery.guard.scm
inference/_rules/c_sharp/queries/c_sharp.reclaim.csrf-no-antiforgery.scm
inference/_rules/c_sharp/queries/c_sharp.reclaim.csrf-no-antiforgery.scope.scm
inference/_rules/c_sharp/queries/c_sharp.reclaim.excessive-agency-destructive-sql-aoai.precond.scm
inference/_rules/c_sharp/queries/c_sharp.reclaim.excessive-agency-destructive-sql-aoai.scm
inference/_rules/c_sharp/queries/c_sharp.reclaim.excessive-agency-destructive-sql-sk.precond.scm
inference/_rules/c_sharp/queries/c_sharp.reclaim.excessive-agency-destructive-sql-sk.scm
inference/_rules/c_sharp/queries/c_sharp.reclaim.excessive-agency-file-delete-aoai.precond.scm
inference/_rules/c_sharp/queries/c_sharp.reclaim.excessive-agency-file-delete-aoai.scm
inference/_rules/c_sharp/queries/c_sharp.reclaim.excessive-agency-file-delete-sk.precond.scm
inference/_rules/c_sharp/queries/c_sharp.reclaim.excessive-agency-file-delete-sk.scm
inference/_rules/c_sharp/queries/c_sharp.reclaim.excessive-agency-shell-tool-aoai.precond.scm
inference/_rules/c_sharp/queries/c_sharp.reclaim.excessive-agency-shell-tool-aoai.scm
inference/_rules/c_sharp/queries/c_sharp.reclaim.excessive-agency-shell-tool-sk.precond.scm
inference/_rules/c_sharp/queries/c_sharp.reclaim.excessive-agency-shell-tool-sk.scm
inference/_rules/c_sharp/queries/c_sharp.reclaim.idor-ef-find.scm
inference/_rules/c_sharp/queries/c_sharp.reclaim.idor-ef-find.sink.scm
inference/_rules/c_sharp/queries/c_sharp.reclaim.idor-ef-find.source.scm
inference/_rules/c_sharp/queries/c_sharp.reclaim.idor-horizontal-escalation.scm
inference/_rules/c_sharp/queries/c_sharp.reclaim.idor-horizontal-escalation.sink.scm
inference/_rules/c_sharp/queries/c_sharp.reclaim.idor-horizontal-escalation.source.scm
inference/_rules/c_sharp/queries/c_sharp.reclaim.missing-auth-aspnet-endpoint.guard.scm
inference/_rules/c_sharp/queries/c_sharp.reclaim.missing-auth-aspnet-endpoint.scm
inference/_rules/c_sharp/queries/c_sharp.reclaim.missing-auth-aspnet-endpoint.scope.scm
inference/_rules/c_sharp/queries/c_sharp.reclaim.nydfs-mfa-check-password-async.guard.scm
inference/_rules/c_sharp/queries/c_sharp.reclaim.nydfs-mfa-check-password-async.scm
inference/_rules/c_sharp/queries/c_sharp.reclaim.nydfs-mfa-check-password-async.scope.scm
inference/_rules/c_sharp/queries/c_sharp.reclaim.nydfs-mfa-check-password-signin.guard.scm
inference/_rules/c_sharp/queries/c_sharp.reclaim.nydfs-mfa-check-password-signin.scm
inference/_rules/c_sharp/queries/c_sharp.reclaim.nydfs-mfa-check-password-signin.scope.scm
inference/_rules/c_sharp/queries/c_sharp.reclaim.nydfs-mfa-password-signin.guard.scm
inference/_rules/c_sharp/queries/c_sharp.reclaim.nydfs-mfa-password-signin.scm
inference/_rules/c_sharp/queries/c_sharp.reclaim.nydfs-mfa-password-signin.scope.scm
inference/_rules/c_sharp/queries/c_sharp.reclaim.xxe-xmldocument.guard.scm
inference/_rules/c_sharp/queries/c_sharp.reclaim.xxe-xmldocument.scm
inference/_rules/c_sharp/queries/c_sharp.reclaim.xxe-xmldocument.scope.scm
inference/_rules/c_sharp/queries/c_sharp.reclaim.xxe-xmltextreader.guard.scm
inference/_rules/c_sharp/queries/c_sharp.reclaim.xxe-xmltextreader.scm
inference/_rules/c_sharp/queries/c_sharp.reclaim.xxe-xmltextreader.scope.scm
inference/_rules/c_sharp/queries/c_sharp.sensitive-data-logging.console-secret-pattern.scm
inference/_rules/c_sharp/queries/c_sharp.sensitive-data.secret-in-prompt.scm
inference/_rules/c_sharp/queries/c_sharp.sensitive-data.ssn-in-prompt.scm
inference/_rules/c_sharp/queries/c_sharp.sensitive-data.ssn-literal-in-prompt.scm
inference/_rules/c_sharp/queries/c_sharp.sqli.commandtext-concat.scm
inference/_rules/c_sharp/queries/c_sharp.sqli.string-concat.scm
inference/_rules/c_sharp/queries/c_sharp.ssrf.request-to-httpclient.scm
inference/_rules/c_sharp/queries/c_sharp.ssrf.restrequest-from-request.scm
inference/_rules/c_sharp/queries/c_sharp.ssrf.webrequest-create-from-request.scm
inference/_rules/c_sharp/queries/c_sharp.weak-crypto.des-cipher.scm
inference/_rules/c_sharp/queries/c_sharp.weak-crypto.insecure-random.scm
inference/_rules/c_sharp/queries/c_sharp.weak-crypto.md5.scm
inference/_rules/c_sharp/queries/c_sharp.weak-crypto.rc2.scm
inference/_rules/c_sharp/queries/c_sharp.weak-crypto.rijndael-deprecated.scm
inference/_rules/c_sharp/queries/c_sharp.weak-crypto.sha1.scm
inference/_rules/c_sharp/queries/c_sharp.xpath-injection.string-concat.scm
inference/_rules/c_sharp/queries/c_sharp.xss.html-raw.scm
inference/_rules/c_sharp/queries/c_sharp.xss.response-write.scm
inference/_rules/c_sharp/queries/c_sharp.xxe.dtd-processing-parse.scm
inference/_rules/c_sharp/queries/smoke.c_sharp.dangerous-call.scm
inference/_rules/cpp/metadata/cpp.buffer-overflow.memcpy-variable-size.json
inference/_rules/cpp/metadata/cpp.command-injection.exec-macro.json
inference/_rules/cpp/metadata/cpp.command-injection.popen-nonliteral.json
inference/_rules/cpp/metadata/cpp.command-injection.system-nonliteral.json
inference/_rules/cpp/metadata/cpp.dangerous-call.gets-usage.json
inference/_rules/cpp/metadata/cpp.dangerous-call.scanf-no-width.json
inference/_rules/cpp/metadata/cpp.dangerous-call.sprintf-usage.json
inference/_rules/cpp/metadata/cpp.dangerous-call.strcat-usage.json
inference/_rules/cpp/metadata/cpp.dangerous-call.strcpy-usage.json
inference/_rules/cpp/metadata/cpp.format-string.syslog-variable-format.json
inference/_rules/cpp/metadata/cpp.format-string.variable-format.json
inference/_rules/cpp/metadata/cpp.integer-overflow.alloc-arith.json
inference/_rules/cpp/metadata/cpp.reclaim.command-injection-taint.json
inference/_rules/cpp/metadata/cpp.reclaim.format-string-taint.json
inference/_rules/cpp/metadata/cpp.reclaim.integer-overflow-taint.json
inference/_rules/cpp/metadata/cpp.reclaim.malloc-no-free.json
inference/_rules/cpp/metadata/cpp.reclaim.new-array-no-delete.json
inference/_rules/cpp/metadata/cpp.reclaim.new-no-delete.json
inference/_rules/cpp/metadata/cpp.reclaim.strdup-no-free.json
inference/_rules/cpp/metadata/cpp.weak-crypto.blowfish.json
inference/_rules/cpp/metadata/cpp.weak-crypto.des.json
inference/_rules/cpp/metadata/cpp.weak-crypto.ecb-mode.json
inference/_rules/cpp/metadata/cpp.weak-crypto.md5.json
inference/_rules/cpp/metadata/cpp.weak-crypto.pbkdf2-low-rounds.json
inference/_rules/cpp/metadata/cpp.weak-crypto.rc4.json
inference/_rules/cpp/metadata/cpp.weak-crypto.sha1.json
inference/_rules/cpp/queries/cpp.buffer-overflow.memcpy-variable-size.scm
inference/_rules/cpp/queries/cpp.command-injection.exec-macro.scm
inference/_rules/cpp/queries/cpp.command-injection.popen-nonliteral.scm
inference/_rules/cpp/queries/cpp.command-injection.system-nonliteral.scm
inference/_rules/cpp/queries/cpp.dangerous-call.gets-usage.scm
inference/_rules/cpp/queries/cpp.dangerous-call.scanf-no-width.scm
inference/_rules/cpp/queries/cpp.dangerous-call.sprintf-usage.scm
inference/_rules/cpp/queries/cpp.dangerous-call.strcat-usage.scm
inference/_rules/cpp/queries/cpp.dangerous-call.strcpy-usage.scm
inference/_rules/cpp/queries/cpp.format-string.syslog-variable-format.scm
inference/_rules/cpp/queries/cpp.format-string.variable-format.scm
inference/_rules/cpp/queries/cpp.integer-overflow.alloc-arith.scm
inference/_rules/cpp/queries/cpp.reclaim.command-injection-taint.sanitizer.scm
inference/_rules/cpp/queries/cpp.reclaim.command-injection-taint.scm
inference/_rules/cpp/queries/cpp.reclaim.command-injection-taint.sink.scm
inference/_rules/cpp/queries/cpp.reclaim.command-injection-taint.source.scm
inference/_rules/cpp/queries/cpp.reclaim.format-string-taint.scm
inference/_rules/cpp/queries/cpp.reclaim.format-string-taint.sink.scm
inference/_rules/cpp/queries/cpp.reclaim.format-string-taint.source.scm
inference/_rules/cpp/queries/cpp.reclaim.integer-overflow-taint.sanitizer.scm
inference/_rules/cpp/queries/cpp.reclaim.integer-overflow-taint.scm
inference/_rules/cpp/queries/cpp.reclaim.integer-overflow-taint.sink.scm
inference/_rules/cpp/queries/cpp.reclaim.integer-overflow-taint.source.scm
inference/_rules/cpp/queries/cpp.reclaim.malloc-no-free.guard.scm
inference/_rules/cpp/queries/cpp.reclaim.malloc-no-free.scm
inference/_rules/cpp/queries/cpp.reclaim.malloc-no-free.scope.scm
inference/_rules/cpp/queries/cpp.reclaim.new-array-no-delete.guard.scm
inference/_rules/cpp/queries/cpp.reclaim.new-array-no-delete.scm
inference/_rules/cpp/queries/cpp.reclaim.new-array-no-delete.scope.scm
inference/_rules/cpp/queries/cpp.reclaim.new-no-delete.guard.scm
inference/_rules/cpp/queries/cpp.reclaim.new-no-delete.scm
inference/_rules/cpp/queries/cpp.reclaim.new-no-delete.scope.scm
inference/_rules/cpp/queries/cpp.reclaim.strdup-no-free.guard.scm
inference/_rules/cpp/queries/cpp.reclaim.strdup-no-free.scm
inference/_rules/cpp/queries/cpp.reclaim.strdup-no-free.scope.scm
inference/_rules/cpp/queries/cpp.weak-crypto.blowfish.scm
inference/_rules/cpp/queries/cpp.weak-crypto.des.scm
inference/_rules/cpp/queries/cpp.weak-crypto.ecb-mode.scm
inference/_rules/cpp/queries/cpp.weak-crypto.md5.scm
inference/_rules/cpp/queries/cpp.weak-crypto.pbkdf2-low-rounds.scm
inference/_rules/cpp/queries/cpp.weak-crypto.rc4.scm
inference/_rules/cpp/queries/cpp.weak-crypto.sha1.scm
inference/_rules/dockerfile/metadata/dockerfile.exposed-secret.arg-secret-default.json
inference/_rules/dockerfile/metadata/dockerfile.exposed-secret.env-password.json
inference/_rules/dockerfile/metadata/dockerfile.exposed-secret.env-token.json
inference/_rules/dockerfile/metadata/dockerfile.insecure-download.curl-pipe.json
inference/_rules/dockerfile/metadata/dockerfile.insecure-download.http.json
inference/_rules/dockerfile/metadata/dockerfile.missing-healthcheck.none.json
inference/_rules/dockerfile/metadata/dockerfile.privileged-port.http-80.json
inference/_rules/dockerfile/metadata/dockerfile.privileged-port.https-443.json
inference/_rules/dockerfile/metadata/dockerfile.privileged-port.ssh-22.json
inference/_rules/dockerfile/metadata/dockerfile.run-as-root.no-user.json
inference/_rules/dockerfile/metadata/dockerfile.run-as-root.user-root.json
inference/_rules/dockerfile/metadata/dockerfile.sensitive-file.credentials.json
inference/_rules/dockerfile/metadata/dockerfile.sensitive-file.env-file.json
inference/_rules/dockerfile/metadata/dockerfile.sensitive-file.private-key.json
inference/_rules/dockerfile/metadata/dockerfile.unpinned-base.latest-tag.json
inference/_rules/dockerfile/metadata/dockerfile.unpinned-base.no-tag.json
inference/_rules/dockerfile/queries/dockerfile.exposed-secret.arg-secret-default.scm
inference/_rules/dockerfile/queries/dockerfile.exposed-secret.env-password.scm
inference/_rules/dockerfile/queries/dockerfile.exposed-secret.env-token.scm
inference/_rules/dockerfile/queries/dockerfile.insecure-download.curl-pipe.scm
inference/_rules/dockerfile/queries/dockerfile.insecure-download.http.scm
inference/_rules/dockerfile/queries/dockerfile.missing-healthcheck.none.scm
inference/_rules/dockerfile/queries/dockerfile.privileged-port.http-80.scm
inference/_rules/dockerfile/queries/dockerfile.privileged-port.https-443.scm
inference/_rules/dockerfile/queries/dockerfile.privileged-port.ssh-22.scm
inference/_rules/dockerfile/queries/dockerfile.run-as-root.no-user.guard.scm
inference/_rules/dockerfile/queries/dockerfile.run-as-root.no-user.scm
inference/_rules/dockerfile/queries/dockerfile.run-as-root.no-user.scope.scm
inference/_rules/dockerfile/queries/dockerfile.run-as-root.user-root.scm
inference/_rules/dockerfile/queries/dockerfile.sensitive-file.credentials.scm
inference/_rules/dockerfile/queries/dockerfile.sensitive-file.env-file.scm
inference/_rules/dockerfile/queries/dockerfile.sensitive-file.private-key.scm
inference/_rules/dockerfile/queries/dockerfile.unpinned-base.latest-tag.scm
inference/_rules/dockerfile/queries/dockerfile.unpinned-base.no-tag.scm
inference/_rules/go/metadata/go.cmd-injection.command-context.json
inference/_rules/go/metadata/go.cmd-injection.exec-command.json
inference/_rules/go/metadata/go.cmd-injection.os-startprocess.json
inference/_rules/go/metadata/go.cmd-injection.syscall-exec.json
inference/_rules/go/metadata/go.code-injection.plugin-open.json
inference/_rules/go/metadata/go.code-injection.template-html.json
inference/_rules/go/metadata/go.cra.network-impact-resilience.json
inference/_rules/go/metadata/go.cra.secure-update-channel.json
inference/_rules/go/metadata/go.deserialization.gob-decoder.json
inference/_rules/go/metadata/go.hardcoded-secret.comment.json
inference/_rules/go/metadata/go.hardcoded-secret.sql-insert.json
inference/_rules/go/metadata/go.hardcoded-secret.struct-field.json
inference/_rules/go/metadata/go.owasp-agentic.llm-output-db-mutation.json
inference/_rules/go/metadata/go.owasp-agentic.llm-output-exec.json
inference/_rules/go/metadata/go.owasp-agentic.llm-output-file-write.json
inference/_rules/go/metadata/go.owasp-agentic.llm-output-html.json
inference/_rules/go/metadata/go.owasp-agentic.prompt-injection-sprintf.json
inference/_rules/go/metadata/go.owasp-agentic.sensitive-info-apikey.json
inference/_rules/go/metadata/go.path-traversal.os-open.json
inference/_rules/go/metadata/go.phi-plaintext.gorm-ptr.json
inference/_rules/go/metadata/go.phi-plaintext.gorm-string.json
inference/_rules/go/metadata/go.reclaim.csrf-missing-token-check.json
inference/_rules/go/metadata/go.reclaim.csrf-no-middleware.json
inference/_rules/go/metadata/go.reclaim.deserialization-gob-taint.json
inference/_rules/go/metadata/go.reclaim.deserialization-yaml-interface.json
inference/_rules/go/metadata/go.reclaim.idor-data-access-url-param.json
inference/_rules/go/metadata/go.reclaim.nydfs-mfa-bcrypt-no-mfa.json
inference/_rules/go/metadata/go.reclaim.prompt-injection-langchaingo.json
inference/_rules/go/metadata/go.reclaim.prompt-injection-openai.json
inference/_rules/go/metadata/go.reclaim.sensitive-data-sprintf-log.json
inference/_rules/go/metadata/go.reclaim.sensitive-info-connstring.json
inference/_rules/go/metadata/go.reclaim.sensitive-info-password.json
inference/_rules/go/metadata/go.reclaim.text-template-xss.json
inference/_rules/go/metadata/go.reclaim.xss-taint.json
inference/_rules/go/metadata/go.sensitive-data-logging.fmt-print.json
inference/_rules/go/metadata/go.sensitive-data-logging.log-printf.json
inference/_rules/go/metadata/go.sensitive-data-logging.structured-logger.json
inference/_rules/go/metadata/go.sqli.fmt-sprintf.json
inference/_rules/go/metadata/go.sqli.string-concat.json
inference/_rules/go/metadata/go.ssrf.http-get.json
inference/_rules/go/metadata/go.weak-crypto.des-cipher.json
inference/_rules/go/metadata/go.weak-crypto.ecb-mode.json
inference/_rules/go/metadata/go.weak-crypto.hardcoded-key.json
inference/_rules/go/metadata/go.weak-crypto.math-rand-usage.json
inference/_rules/go/metadata/go.weak-crypto.md5.json
inference/_rules/go/metadata/go.weak-crypto.pbkdf2-low-rounds.json
inference/_rules/go/metadata/go.weak-crypto.rc4.json
inference/_rules/go/metadata/go.weak-crypto.sha1.json
inference/_rules/go/metadata/go.weak-crypto.tls-cipher-pref.json
inference/_rules/go/metadata/go.weak-crypto.tls-insecure-skip-verify.json
inference/_rules/go/metadata/go.weak-crypto.tls-weak-version.json
inference/_rules/go/metadata/go.weak-crypto.zero-iv.json
inference/_rules/go/metadata/go.xss.fprintf-html.json
inference/_rules/go/metadata/go.xss.template-html-sprintf.json
inference/_rules/go/metadata/go.xxe.etree.json
inference/_rules/go/metadata/go.xxe.xml-decoder.json
inference/_rules/go/metadata/smoke.go.dangerous-call.json
inference/_rules/go/queries/go.cmd-injection.command-context.scm
inference/_rules/go/queries/go.cmd-injection.exec-command.scm
inference/_rules/go/queries/go.cmd-injection.os-startprocess.scm
inference/_rules/go/queries/go.cmd-injection.syscall-exec.scm
inference/_rules/go/queries/go.code-injection.plugin-open.scm
inference/_rules/go/queries/go.code-injection.template-html.scm
inference/_rules/go/queries/go.cra.network-impact-resilience.scm
inference/_rules/go/queries/go.cra.secure-update-channel.scm
inference/_rules/go/queries/go.deserialization.gob-decoder.scm
inference/_rules/go/queries/go.hardcoded-secret.comment.scm
inference/_rules/go/queries/go.hardcoded-secret.sql-insert.scm
inference/_rules/go/queries/go.hardcoded-secret.struct-field.scm
inference/_rules/go/queries/go.owasp-agentic.llm-output-db-mutation.scm
inference/_rules/go/queries/go.owasp-agentic.llm-output-exec.scm
inference/_rules/go/queries/go.owasp-agentic.llm-output-file-write.scm
inference/_rules/go/queries/go.owasp-agentic.llm-output-html.scm
inference/_rules/go/queries/go.owasp-agentic.prompt-injection-sprintf.scm
inference/_rules/go/queries/go.owasp-agentic.sensitive-info-apikey.scm
inference/_rules/go/queries/go.path-traversal.os-open.scm
inference/_rules/go/queries/go.phi-plaintext.gorm-ptr.scm
inference/_rules/go/queries/go.phi-plaintext.gorm-string.scm
inference/_rules/go/queries/go.reclaim.csrf-missing-token-check.guard.scm
inference/_rules/go/queries/go.reclaim.csrf-missing-token-check.scm
inference/_rules/go/queries/go.reclaim.csrf-missing-token-check.scope.scm
inference/_rules/go/queries/go.reclaim.csrf-no-middleware.precond.scm
inference/_rules/go/queries/go.reclaim.csrf-no-middleware.scm
inference/_rules/go/queries/go.reclaim.deserialization-gob-taint.sanitizer.scm
inference/_rules/go/queries/go.reclaim.deserialization-gob-taint.scm
inference/_rules/go/queries/go.reclaim.deserialization-gob-taint.sink.scm
inference/_rules/go/queries/go.reclaim.deserialization-gob-taint.source.scm
inference/_rules/go/queries/go.reclaim.deserialization-yaml-interface.scm
inference/_rules/go/queries/go.reclaim.deserialization-yaml-interface.sink.scm
inference/_rules/go/queries/go.reclaim.deserialization-yaml-interface.source.scm
inference/_rules/go/queries/go.reclaim.idor-data-access-url-param.scm
inference/_rules/go/queries/go.reclaim.idor-data-access-url-param.sink.scm
inference/_rules/go/queries/go.reclaim.idor-data-access-url-param.source.scm
inference/_rules/go/queries/go.reclaim.nydfs-mfa-bcrypt-no-mfa.guard.scm
inference/_rules/go/queries/go.reclaim.nydfs-mfa-bcrypt-no-mfa.scm
inference/_rules/go/queries/go.reclaim.nydfs-mfa-bcrypt-no-mfa.scope.scm
inference/_rules/go/queries/go.reclaim.prompt-injection-langchaingo.scm
inference/_rules/go/queries/go.reclaim.prompt-injection-langchaingo.sink.scm
inference/_rules/go/queries/go.reclaim.prompt-injection-langchaingo.source.scm
inference/_rules/go/queries/go.reclaim.prompt-injection-openai.sanitizer.scm
inference/_rules/go/queries/go.reclaim.prompt-injection-openai.scm
inference/_rules/go/queries/go.reclaim.prompt-injection-openai.sink.scm
inference/_rules/go/queries/go.reclaim.prompt-injection-openai.source.scm
inference/_rules/go/queries/go.reclaim.sensitive-data-sprintf-log.scm
inference/_rules/go/queries/go.reclaim.sensitive-data-sprintf-log.sink.scm
inference/_rules/go/queries/go.reclaim.sensitive-data-sprintf-log.source.scm
inference/_rules/go/queries/go.reclaim.sensitive-info-connstring.scm
inference/_rules/go/queries/go.reclaim.sensitive-info-connstring.sink.scm
inference/_rules/go/queries/go.reclaim.sensitive-info-connstring.source.scm
inference/_rules/go/queries/go.reclaim.sensitive-info-password.sanitizer.scm
inference/_rules/go/queries/go.reclaim.sensitive-info-password.scm
inference/_rules/go/queries/go.reclaim.sensitive-info-password.sink.scm
inference/_rules/go/queries/go.reclaim.sensitive-info-password.source.scm
inference/_rules/go/queries/go.reclaim.text-template-xss.precond.scm
inference/_rules/go/queries/go.reclaim.text-template-xss.scm
inference/_rules/go/queries/go.reclaim.xss-taint.sanitizer.scm
inference/_rules/go/queries/go.reclaim.xss-taint.scm
inference/_rules/go/queries/go.reclaim.xss-taint.sink.scm
inference/_rules/go/queries/go.reclaim.xss-taint.source.scm
inference/_rules/go/queries/go.sensitive-data-logging.fmt-print.scm
inference/_rules/go/queries/go.sensitive-data-logging.log-printf.scm
inference/_rules/go/queries/go.sensitive-data-logging.structured-logger.scm
inference/_rules/go/queries/go.sqli.fmt-sprintf.scm
inference/_rules/go/queries/go.sqli.string-concat.scm
inference/_rules/go/queries/go.ssrf.http-get.scm
inference/_rules/go/queries/go.weak-crypto.des-cipher.scm
inference/_rules/go/queries/go.weak-crypto.ecb-mode.scm
inference/_rules/go/queries/go.weak-crypto.hardcoded-key.scm
inference/_rules/go/queries/go.weak-crypto.math-rand-usage.scm
inference/_rules/go/queries/go.weak-crypto.md5.scm
inference/_rules/go/queries/go.weak-crypto.pbkdf2-low-rounds.scm
inference/_rules/go/queries/go.weak-crypto.rc4.scm
inference/_rules/go/queries/go.weak-crypto.sha1.scm
inference/_rules/go/queries/go.weak-crypto.tls-cipher-pref.scm
inference/_rules/go/queries/go.weak-crypto.tls-insecure-skip-verify.scm
inference/_rules/go/queries/go.weak-crypto.tls-weak-version.scm
inference/_rules/go/queries/go.weak-crypto.zero-iv.scm
inference/_rules/go/queries/go.xss.fprintf-html.scm
inference/_rules/go/queries/go.xss.template-html-sprintf.scm
inference/_rules/go/queries/go.xxe.etree.scm
inference/_rules/go/queries/go.xxe.xml-decoder.scm
inference/_rules/go/queries/smoke.go.dangerous-call.scm
inference/_rules/iac/metadata/iac.hcl.alb-no-access-logs.json
inference/_rules/iac/metadata/iac.hcl.alicloud-actiontrail-read-only.json
inference/_rules/iac/metadata/iac.hcl.alicloud-actiontrail-single-region.json
inference/_rules/iac/metadata/iac.hcl.alicloud-rds-public-ips.json
inference/_rules/iac/metadata/iac.hcl.azure-aks-kube-dashboard-enabled.json
inference/_rules/iac/metadata/iac.hcl.azure-aks-rbac-disabled.json
inference/_rules/iac/metadata/iac.hcl.azure-app-gateway-backend-http.json
inference/_rules/iac/metadata/iac.hcl.azure-app-gateway-http-listener.json
inference/_rules/iac/metadata/iac.hcl.azure-app-gateway-no-waf.json
inference/_rules/iac/metadata/iac.hcl.azure-app-service-auth-disabled.json
inference/_rules/iac/metadata/iac.hcl.azure-app-service-https-only-disabled.json
inference/_rules/iac/metadata/iac.hcl.azure-app-service-weak-tls.json
inference/_rules/iac/metadata/iac.hcl.azure-key-vault-no-purge-protection.json
inference/_rules/iac/metadata/iac.hcl.azure-linux-vm-password-auth.json
inference/_rules/iac/metadata/iac.hcl.azure-log-profile-incomplete.json
inference/_rules/iac/metadata/iac.hcl.azure-mssql-alert-no-emails.json
inference/_rules/iac/metadata/iac.hcl.azure-mssql-disabled-alerts.json
inference/_rules/iac/metadata/iac.hcl.azure-network-watcher-flow-log-disabled.json
inference/_rules/iac/metadata/iac.hcl.azure-nsg-rdp-open.json
inference/_rules/iac/metadata/iac.hcl.azure-nsg-ssh-open.json
inference/_rules/iac/metadata/iac.hcl.azure-postgresql-log-checkpoints-off.json
inference/_rules/iac/metadata/iac.hcl.azure-postgresql-throttling-off.json
inference/_rules/iac/metadata/iac.hcl.azure-security-center-free-tier.json
inference/_rules/iac/metadata/iac.hcl.azure-security-center-no-alerts.json
inference/_rules/iac/metadata/iac.hcl.azure-sql-public-network-enabled.json
inference/_rules/iac/metadata/iac.hcl.azure-storage-https-only-disabled.json
inference/_rules/iac/metadata/iac.hcl.azure-storage-no-delete-logging.json
inference/_rules/iac/metadata/iac.hcl.azure-storage-no-read-logging.json
inference/_rules/iac/metadata/iac.hcl.azure-vm-password-auth-enabled.json
inference/_rules/iac/metadata/iac.hcl.cloudtrail-no-encryption.json
inference/_rules/iac/metadata/iac.hcl.cloudtrail-no-s3-bucket.json
inference/_rules/iac/metadata/iac.hcl.cloudtrail-no-validation.json
inference/_rules/iac/metadata/iac.hcl.cloudtrail-not-multiregion.json
inference/_rules/iac/metadata/iac.hcl.cognito-mfa-disabled.json
inference/_rules/iac/metadata/iac.hcl.ebs-no-encryption-devtag.json
inference/_rules/iac/metadata/iac.hcl.ebs-no-encryption.json
inference/_rules/iac/metadata/iac.hcl.ebs-snapshot-no-encryption.json
inference/_rules/iac/metadata/iac.hcl.ecr-mutable-tags.json
inference/_rules/iac/metadata/iac.hcl.ecr-no-scan-on-push.json
inference/_rules/iac/metadata/iac.hcl.eks-no-secrets-encryption.json
inference/_rules/iac/metadata/iac.hcl.eks-public-endpoint.json
inference/_rules/iac/metadata/iac.hcl.elasticache-no-transit-encryption.json
inference/_rules/iac/metadata/iac.hcl.elasticsearch-no-encryption.json
inference/_rules/iac/metadata/iac.hcl.elasticsearch-old-version.json
inference/_rules/iac/metadata/iac.hcl.elb-classic-http-listener.json
inference/_rules/iac/metadata/iac.hcl.elb-no-https.json
inference/_rules/iac/metadata/iac.hcl.gcp-compute-can-ip-forward.json
inference/_rules/iac/metadata/iac.hcl.gcp-compute-disk-no-cmek.json
inference/_rules/iac/metadata/iac.hcl.gcp-compute-os-login-disabled.json
inference/_rules/iac/metadata/iac.hcl.gcp-compute-project-ssh-keys.json
inference/_rules/iac/metadata/iac.hcl.gcp-compute-serial-port-enabled.json
inference/_rules/iac/metadata/iac.hcl.gcp-firewall-all-ports.json
inference/_rules/iac/metadata/iac.hcl.gcp-gke-legacy-abac.json
inference/_rules/iac/metadata/iac.hcl.gcp-gke-logging-disabled.json
inference/_rules/iac/metadata/iac.hcl.gcp-gke-monitoring-disabled.json
inference/_rules/iac/metadata/iac.hcl.gcp-gke-no-network-policy.json
inference/_rules/iac/metadata/iac.hcl.gcp-sql-backup-disabled.json
inference/_rules/iac/metadata/iac.hcl.gcp-sql-public-ip.json
inference/_rules/iac/metadata/iac.hcl.gcp-storage-public-iam.json
inference/_rules/iac/metadata/iac.hcl.hardcoded-credential.json
inference/_rules/iac/metadata/iac.hcl.iam-assume-role-wildcard.json
inference/_rules/iac/metadata/iac.hcl.iam-policy-wildcard-action.json
inference/_rules/iac/metadata/iac.hcl.iam-service-wildcard-action-json.json
inference/_rules/iac/metadata/iac.hcl.iam-wildcard-action-json.json
inference/_rules/iac/metadata/iac.hcl.iam-wildcard-jsonencode.json
inference/_rules/iac/metadata/iac.hcl.iam-wildcard-resource-json.json
inference/_rules/iac/metadata/iac.hcl.kms-no-key-rotation.json
inference/_rules/iac/metadata/iac.hcl.lambda-no-vpc.json
inference/_rules/iac/metadata/iac.hcl.neptune-no-iam-auth.json
inference/_rules/iac/metadata/iac.hcl.oci-bucket-no-cmek.json
inference/_rules/iac/metadata/iac.hcl.oci-bucket-no-events.json
inference/_rules/iac/metadata/iac.hcl.oci-bucket-no-versioning.json
inference/_rules/iac/metadata/iac.hcl.oci-compartment-deletable.json
inference/_rules/iac/metadata/iac.hcl.rds-backup-disabled.json
inference/_rules/iac/metadata/iac.hcl.rds-cluster-low-backup-retention.json
inference/_rules/iac/metadata/iac.hcl.rds-cluster-no-backup-retention.json
inference/_rules/iac/metadata/iac.hcl.rds-iam-auth-disabled.json
inference/_rules/iac/metadata/iac.hcl.rds-no-backup-retention.json
inference/_rules/iac/metadata/iac.hcl.rds-no-encryption-devtag.json
inference/_rules/iac/metadata/iac.hcl.rds-no-encryption.json
inference/_rules/iac/metadata/iac.hcl.rds-publicly-accessible.json
inference/_rules/iac/metadata/iac.hcl.s3-bucket-public-acl.json
inference/_rules/iac/metadata/iac.hcl.s3-mfa-delete-disabled.json
inference/_rules/iac/metadata/iac.hcl.s3-no-encryption.json
inference/_rules/iac/metadata/iac.hcl.s3-no-versioning.json
inference/_rules/iac/metadata/iac.hcl.security-group-open-cidr.json
inference/_rules/iac/metadata/iac.hcl.security-group-open-ipv6.json
inference/_rules/iac/metadata/iac.hcl.storage-encryption-disabled.json
inference/_rules/iac/metadata/iac.hcl.subnet-public-ip-on-launch.json
inference/_rules/iac/metadata/iac.yaml.cicd-curl-pipe-bash.json
inference/_rules/iac/metadata/iac.yaml.cicd-docker-socket-mount.json
inference/_rules/iac/metadata/iac.yaml.gha-debug-enabled.json
inference/_rules/iac/metadata/iac.yaml.gha-hardcoded-credential.json
inference/_rules/iac/metadata/iac.yaml.gha-injection-untrusted-input.json
inference/_rules/iac/metadata/iac.yaml.gha-pull-request-target.json
inference/_rules/iac/metadata/iac.yaml.gha-ubuntu-latest.json
inference/_rules/iac/metadata/iac.yaml.gha-unpinned-action.json
inference/_rules/iac/metadata/iac.yaml.gha-write-all-permissions.json
inference/_rules/iac/metadata/iac.yaml.gitlab-hardcoded-variable.json
inference/_rules/iac/metadata/iac.yaml.gitlab-privileged-runner.json
inference/_rules/iac/metadata/iac.yaml.gitlab-unprotected-deployment.json
inference/_rules/iac/metadata/iac.yaml.k8s-allow-privilege-escalation.json
inference/_rules/iac/metadata/iac.yaml.k8s-host-ipc.json
inference/_rules/iac/metadata/iac.yaml.k8s-host-network.json
inference/_rules/iac/metadata/iac.yaml.k8s-host-pid.json
inference/_rules/iac/metadata/iac.yaml.k8s-image-tag-latest.json
inference/_rules/iac/metadata/iac.yaml.k8s-privileged-container.json
inference/_rules/iac/metadata/iac.yaml.k8s-run-as-root.json
inference/_rules/iac/metadata/smoke.hcl.dangerous-call.json
inference/_rules/iac/metadata/smoke.yaml.dangerous-call.json
inference/_rules/iac/queries/iac.hcl.alb-no-access-logs.guard.scm
inference/_rules/iac/queries/iac.hcl.alb-no-access-logs.scm
inference/_rules/iac/queries/iac.hcl.alb-no-access-logs.scope.scm
inference/_rules/iac/queries/iac.hcl.alicloud-actiontrail-read-only.scm
inference/_rules/iac/queries/iac.hcl.alicloud-actiontrail-single-region.scm
inference/_rules/iac/queries/iac.hcl.alicloud-rds-public-ips.scm
inference/_rules/iac/queries/iac.hcl.azure-aks-kube-dashboard-enabled.scm
inference/_rules/iac/queries/iac.hcl.azure-aks-rbac-disabled.scm
inference/_rules/iac/queries/iac.hcl.azure-app-gateway-backend-http.scm
inference/_rules/iac/queries/iac.hcl.azure-app-gateway-http-listener.scm
inference/_rules/iac/queries/iac.hcl.azure-app-gateway-no-waf.scm
inference/_rules/iac/queries/iac.hcl.azure-app-service-auth-disabled.scm
inference/_rules/iac/queries/iac.hcl.azure-app-service-https-only-disabled.scm
inference/_rules/iac/queries/iac.hcl.azure-app-service-weak-tls.scm
inference/_rules/iac/queries/iac.hcl.azure-key-vault-no-purge-protection.guard.scm
inference/_rules/iac/queries/iac.hcl.azure-key-vault-no-purge-protection.scm
inference/_rules/iac/queries/iac.hcl.azure-key-vault-no-purge-protection.scope.scm
inference/_rules/iac/queries/iac.hcl.azure-linux-vm-password-auth.scm
inference/_rules/iac/queries/iac.hcl.azure-log-profile-incomplete.scm
inference/_rules/iac/queries/iac.hcl.azure-mssql-alert-no-emails.guard.scm
inference/_rules/iac/queries/iac.hcl.azure-mssql-alert-no-emails.scm
inference/_rules/iac/queries/iac.hcl.azure-mssql-alert-no-emails.scope.scm
inference/_rules/iac/queries/iac.hcl.azure-mssql-disabled-alerts.scm
inference/_rules/iac/queries/iac.hcl.azure-network-watcher-flow-log-disabled.scm
inference/_rules/iac/queries/iac.hcl.azure-nsg-rdp-open.scm
inference/_rules/iac/queries/iac.hcl.azure-nsg-ssh-open.scm
inference/_rules/iac/queries/iac.hcl.azure-postgresql-log-checkpoints-off.scm
inference/_rules/iac/queries/iac.hcl.azure-postgresql-throttling-off.scm
inference/_rules/iac/queries/iac.hcl.azure-security-center-free-tier.scm
inference/_rules/iac/queries/iac.hcl.azure-security-center-no-alerts.scm
inference/_rules/iac/queries/iac.hcl.azure-sql-public-network-enabled.scm
inference/_rules/iac/queries/iac.hcl.azure-storage-https-only-disabled.scm
inference/_rules/iac/queries/iac.hcl.azure-storage-no-delete-logging.scm
inference/_rules/iac/queries/iac.hcl.azure-storage-no-read-logging.scm
inference/_rules/iac/queries/iac.hcl.azure-vm-password-auth-enabled.scm
inference/_rules/iac/queries/iac.hcl.cloudtrail-no-encryption.guard.scm
inference/_rules/iac/queries/iac.hcl.cloudtrail-no-encryption.scm
inference/_rules/iac/queries/iac.hcl.cloudtrail-no-encryption.scope.scm
inference/_rules/iac/queries/iac.hcl.cloudtrail-no-s3-bucket.guard.scm
inference/_rules/iac/queries/iac.hcl.cloudtrail-no-s3-bucket.scm
inference/_rules/iac/queries/iac.hcl.cloudtrail-no-s3-bucket.scope.scm
inference/_rules/iac/queries/iac.hcl.cloudtrail-no-validation.guard.scm
inference/_rules/iac/queries/iac.hcl.cloudtrail-no-validation.scm
inference/_rules/iac/queries/iac.hcl.cloudtrail-no-validation.scope.scm
inference/_rules/iac/queries/iac.hcl.cloudtrail-not-multiregion.guard.scm
inference/_rules/iac/queries/iac.hcl.cloudtrail-not-multiregion.scm
inference/_rules/iac/queries/iac.hcl.cloudtrail-not-multiregion.scope.scm
inference/_rules/iac/queries/iac.hcl.cognito-mfa-disabled.scm
inference/_rules/iac/queries/iac.hcl.ebs-no-encryption-devtag.guard.scm
inference/_rules/iac/queries/iac.hcl.ebs-no-encryption-devtag.scm
inference/_rules/iac/queries/iac.hcl.ebs-no-encryption-devtag.scope.scm
inference/_rules/iac/queries/iac.hcl.ebs-no-encryption.guard.scm
inference/_rules/iac/queries/iac.hcl.ebs-no-encryption.scm
inference/_rules/iac/queries/iac.hcl.ebs-no-encryption.scope.scm
inference/_rules/iac/queries/iac.hcl.ebs-snapshot-no-encryption.guard.scm
inference/_rules/iac/queries/iac.hcl.ebs-snapshot-no-encryption.scm
inference/_rules/iac/queries/iac.hcl.ebs-snapshot-no-encryption.scope.scm
inference/_rules/iac/queries/iac.hcl.ecr-mutable-tags.scm
inference/_rules/iac/queries/iac.hcl.ecr-no-scan-on-push.guard.scm
inference/_rules/iac/queries/iac.hcl.ecr-no-scan-on-push.scm
inference/_rules/iac/queries/iac.hcl.ecr-no-scan-on-push.scope.scm
inference/_rules/iac/queries/iac.hcl.eks-no-secrets-encryption.guard.scm
inference/_rules/iac/queries/iac.hcl.eks-no-secrets-encryption.scm
inference/_rules/iac/queries/iac.hcl.eks-no-secrets-encryption.scope.scm
inference/_rules/iac/queries/iac.hcl.eks-public-endpoint.scm
inference/_rules/iac/queries/iac.hcl.elasticache-no-transit-encryption.scm
inference/_rules/iac/queries/iac.hcl.elasticsearch-no-encryption.guard.scm
inference/_rules/iac/queries/iac.hcl.elasticsearch-no-encryption.scm
inference/_rules/iac/queries/iac.hcl.elasticsearch-no-encryption.scope.scm
inference/_rules/iac/queries/iac.hcl.elasticsearch-old-version.scm
inference/_rules/iac/queries/iac.hcl.elb-classic-http-listener.scm
inference/_rules/iac/queries/iac.hcl.elb-no-https.scm
inference/_rules/iac/queries/iac.hcl.gcp-compute-can-ip-forward.scm
inference/_rules/iac/queries/iac.hcl.gcp-compute-disk-no-cmek.guard.scm
inference/_rules/iac/queries/iac.hcl.gcp-compute-disk-no-cmek.scm
inference/_rules/iac/queries/iac.hcl.gcp-compute-disk-no-cmek.scope.scm
inference/_rules/iac/queries/iac.hcl.gcp-compute-os-login-disabled.scm
inference/_rules/iac/queries/iac.hcl.gcp-compute-project-ssh-keys.scm
inference/_rules/iac/queries/iac.hcl.gcp-compute-serial-port-enabled.scm
inference/_rules/iac/queries/iac.hcl.gcp-firewall-all-ports.scm
inference/_rules/iac/queries/iac.hcl.gcp-gke-legacy-abac.scm
inference/_rules/iac/queries/iac.hcl.gcp-gke-logging-disabled.scm
inference/_rules/iac/queries/iac.hcl.gcp-gke-monitoring-disabled.scm
inference/_rules/iac/queries/iac.hcl.gcp-gke-no-network-policy.guard.scm
inference/_rules/iac/queries/iac.hcl.gcp-gke-no-network-policy.scm
inference/_rules/iac/queries/iac.hcl.gcp-gke-no-network-policy.scope.scm
inference/_rules/iac/queries/iac.hcl.gcp-sql-backup-disabled.scm
inference/_rules/iac/queries/iac.hcl.gcp-sql-public-ip.scm
inference/_rules/iac/queries/iac.hcl.gcp-storage-public-iam.scm
inference/_rules/iac/queries/iac.hcl.hardcoded-credential.scm
inference/_rules/iac/queries/iac.hcl.iam-assume-role-wildcard.scm
inference/_rules/iac/queries/iac.hcl.iam-policy-wildcard-action.scm
inference/_rules/iac/queries/iac.hcl.iam-service-wildcard-action-json.scm
inference/_rules/iac/queries/iac.hcl.iam-wildcard-action-json.scm
inference/_rules/iac/queries/iac.hcl.iam-wildcard-jsonencode.scm
inference/_rules/iac/queries/iac.hcl.iam-wildcard-resource-json.scm
inference/_rules/iac/queries/iac.hcl.kms-no-key-rotation.guard.scm
inference/_rules/iac/queries/iac.hcl.kms-no-key-rotation.scm
inference/_rules/iac/queries/iac.hcl.kms-no-key-rotation.scope.scm
inference/_rules/iac/queries/iac.hcl.lambda-no-vpc.guard.scm
inference/_rules/iac/queries/iac.hcl.lambda-no-vpc.scm
inference/_rules/iac/queries/iac.hcl.lambda-no-vpc.scope.scm
inference/_rules/iac/queries/iac.hcl.neptune-no-iam-auth.scm
inference/_rules/iac/queries/iac.hcl.oci-bucket-no-cmek.guard.scm
inference/_rules/iac/queries/iac.hcl.oci-bucket-no-cmek.scm
inference/_rules/iac/queries/iac.hcl.oci-bucket-no-cmek.scope.scm
inference/_rules/iac/queries/iac.hcl.oci-bucket-no-events.scm
inference/_rules/iac/queries/iac.hcl.oci-bucket-no-versioning.guard.scm
inference/_rules/iac/queries/iac.hcl.oci-bucket-no-versioning.scm
inference/_rules/iac/queries/iac.hcl.oci-bucket-no-versioning.scope.scm
inference/_rules/iac/queries/iac.hcl.oci-compartment-deletable.scm
inference/_rules/iac/queries/iac.hcl.rds-backup-disabled.scm
inference/_rules/iac/queries/iac.hcl.rds-cluster-low-backup-retention.scm
inference/_rules/iac/queries/iac.hcl.rds-cluster-no-backup-retention.guard.scm
inference/_rules/iac/queries/iac.hcl.rds-cluster-no-backup-retention.scm
inference/_rules/iac/queries/iac.hcl.rds-cluster-no-backup-retention.scope.scm
inference/_rules/iac/queries/iac.hcl.rds-iam-auth-disabled.scm
inference/_rules/iac/queries/iac.hcl.rds-no-backup-retention.guard.scm
inference/_rules/iac/queries/iac.hcl.rds-no-backup-retention.scm
inference/_rules/iac/queries/iac.hcl.rds-no-backup-retention.scope.scm
inference/_rules/iac/queries/iac.hcl.rds-no-encryption-devtag.guard.scm
inference/_rules/iac/queries/iac.hcl.rds-no-encryption-devtag.scm
inference/_rules/iac/queries/iac.hcl.rds-no-encryption-devtag.scope.scm
inference/_rules/iac/queries/iac.hcl.rds-no-encryption.guard.scm
inference/_rules/iac/queries/iac.hcl.rds-no-encryption.scm
inference/_rules/iac/queries/iac.hcl.rds-no-encryption.scope.scm
inference/_rules/iac/queries/iac.hcl.rds-publicly-accessible.scm
inference/_rules/iac/queries/iac.hcl.s3-bucket-public-acl.scm
inference/_rules/iac/queries/iac.hcl.s3-mfa-delete-disabled.scm
inference/_rules/iac/queries/iac.hcl.s3-no-encryption.guard.scm
inference/_rules/iac/queries/iac.hcl.s3-no-encryption.scm
inference/_rules/iac/queries/iac.hcl.s3-no-encryption.scope.scm
inference/_rules/iac/queries/iac.hcl.s3-no-versioning.guard.scm
inference/_rules/iac/queries/iac.hcl.s3-no-versioning.scm
inference/_rules/iac/queries/iac.hcl.s3-no-versioning.scope.scm
inference/_rules/iac/queries/iac.hcl.security-group-open-cidr.scm
inference/_rules/iac/queries/iac.hcl.security-group-open-ipv6.scm
inference/_rules/iac/queries/iac.hcl.storage-encryption-disabled.scm
inference/_rules/iac/queries/iac.hcl.subnet-public-ip-on-launch.scm
inference/_rules/iac/queries/iac.yaml.cicd-curl-pipe-bash.scm
inference/_rules/iac/queries/iac.yaml.cicd-docker-socket-mount.scm
inference/_rules/iac/queries/iac.yaml.gha-debug-enabled.scm
inference/_rules/iac/queries/iac.yaml.gha-hardcoded-credential.scm
inference/_rules/iac/queries/iac.yaml.gha-injection-untrusted-input.scm
inference/_rules/iac/queries/iac.yaml.gha-pull-request-target.scm
inference/_rules/iac/queries/iac.yaml.gha-ubuntu-latest.scm
inference/_rules/iac/queries/iac.yaml.gha-unpinned-action.scm
inference/_rules/iac/queries/iac.yaml.gha-write-all-permissions.scm
inference/_rules/iac/queries/iac.yaml.gitlab-hardcoded-variable.scm
inference/_rules/iac/queries/iac.yaml.gitlab-privileged-runner.scm
inference/_rules/iac/queries/iac.yaml.gitlab-unprotected-deployment.guard.scm
inference/_rules/iac/queries/iac.yaml.gitlab-unprotected-deployment.scm
inference/_rules/iac/queries/iac.yaml.gitlab-unprotected-deployment.scope.scm
inference/_rules/iac/queries/iac.yaml.k8s-allow-privilege-escalation.scm
inference/_rules/iac/queries/iac.yaml.k8s-host-ipc.scm
inference/_rules/iac/queries/iac.yaml.k8s-host-network.scm
inference/_rules/iac/queries/iac.yaml.k8s-host-pid.scm
inference/_rules/iac/queries/iac.yaml.k8s-image-tag-latest.scm
inference/_rules/iac/queries/iac.yaml.k8s-privileged-container.scm
inference/_rules/iac/queries/iac.yaml.k8s-run-as-root.scm
inference/_rules/iac/queries/smoke.hcl.dangerous-call.scm
inference/_rules/iac/queries/smoke.yaml.dangerous-call.scm
inference/_rules/java/metadata/java.access-control.idor-request-id.json
inference/_rules/java/metadata/java.cmd-injection.processbuilder.json
inference/_rules/java/metadata/java.cmd-injection.runtime-exec.json
inference/_rules/java/metadata/java.code-injection.groovy.json
inference/_rules/java/metadata/java.code-injection.ognl.json
inference/_rules/java/metadata/java.code-injection.script-engine.json
inference/_rules/java/metadata/java.code-injection.spel.json
inference/_rules/java/metadata/java.cra.network-impact-resilience.json
inference/_rules/java/metadata/java.cra.secure-update-channel.json
inference/_rules/java/metadata/java.csrf.disabled.json
inference/_rules/java/metadata/java.deserialization.objectinputstream-untrusted.json
inference/_rules/java/metadata/java.deserialization.readobject.json
inference/_rules/java/metadata/java.deserialization.xmldecoder.json
inference/_rules/java/metadata/java.hardcoded-secret.known-value.json
inference/_rules/java/metadata/java.hardcoded-secret.named-assignment.json
inference/_rules/java/metadata/java.open-redirect.send-redirect.json
inference/_rules/java/metadata/java.open-redirect.spring-redirect-prefix.json
inference/_rules/java/metadata/java.owasp-agentic.excessive-agency-db-destroy.json
inference/_rules/java/metadata/java.owasp-agentic.excessive-agency-exec.json
inference/_rules/java/metadata/java.owasp-agentic.excessive-agency-file-delete.json
inference/_rules/java/metadata/java.owasp-agentic.excessive-agency-network.json
inference/_rules/java/metadata/java.owasp-agentic.output-eval.json
inference/_rules/java/metadata/java.owasp-agentic.output-exec.json
inference/_rules/java/metadata/java.owasp-agentic.output-html-response.json
inference/_rules/java/metadata/java.owasp-agentic.output-sql.json
inference/_rules/java/metadata/java.owasp-agentic.prompt-injection-llm-sink.json
inference/_rules/java/metadata/java.owasp-agentic.prompt-string-concat.json
inference/_rules/java/metadata/java.owasp-agentic.sensitive-pii-in-prompt.json
inference/_rules/java/metadata/java.owasp-agentic.sensitive-secret-in-prompt.json
inference/_rules/java/metadata/java.owasp-agentic.sensitive-ssn-in-prompt.json
inference/_rules/java/metadata/java.owasp-agentic.sensitive-taint-to-llm.json
inference/_rules/java/metadata/java.path-traversal.file-from-request.json
inference/_rules/java/metadata/java.path-traversal.files-readallbytes.json
inference/_rules/java/metadata/java.path-traversal.paths-get.json
inference/_rules/java/metadata/java.phi-plaintext-jpa.unencrypted-column.json
inference/_rules/java/metadata/java.reclaim.access-control.missing-auth-spring-endpoint.json
inference/_rules/java/metadata/java.reclaim.deserialization.xstream-insecure.json
inference/_rules/java/metadata/java.reclaim.nydfs-mfa.controller-no-mfa.json
inference/_rules/java/metadata/java.reclaim.nydfs-mfa.servlet-login-no-mfa.json
inference/_rules/java/metadata/java.reclaim.nydfs-mfa.spring-auth-no-mfa.json
inference/_rules/java/metadata/java.reclaim.xxe.documentbuilder-chained.json
inference/_rules/java/metadata/java.reclaim.xxe.documentbuilder-split.json
inference/_rules/java/metadata/java.reclaim.xxe.saxparser.json
inference/_rules/java/metadata/java.reclaim.xxe.xmlinputfactory.json
inference/_rules/java/metadata/java.sensitive-data-logging.format-log.json
inference/_rules/java/metadata/java.sensitive-data-logging.log-injection.json
inference/_rules/java/metadata/java.sensitive-data-logging.logger-concat.json
inference/_rules/java/metadata/java.sensitive-data-logging.logger-param.json
inference/_rules/java/metadata/java.sensitive-data-logging.stdout.json
inference/_rules/java/metadata/java.sqli.string-concat.json
inference/_rules/java/metadata/java.sqli.string-format.json
inference/_rules/java/metadata/java.ssrf.resttemplate.json
inference/_rules/java/metadata/java.ssrf.url-openconnection.json
inference/_rules/java/metadata/java.weak-crypto.blowfish.json
inference/_rules/java/metadata/java.weak-crypto.des-cipher.json
inference/_rules/java/metadata/java.weak-crypto.ecb-mode.json
inference/_rules/java/metadata/java.weak-crypto.hardcoded-key.json
inference/_rules/java/metadata/java.weak-crypto.insecure-random-crypto.json
inference/_rules/java/metadata/java.weak-crypto.md5.json
inference/_rules/java/metadata/java.weak-crypto.pbkdf2-low-rounds.json
inference/_rules/java/metadata/java.weak-crypto.rc2-cipher.json
inference/_rules/java/metadata/java.weak-crypto.rc4.json
inference/_rules/java/metadata/java.weak-crypto.sha1.json
inference/_rules/java/metadata/java.weak-crypto.zero-iv.json
inference/_rules/java/metadata/java.xss.servlet-writer-direct.json
inference/_rules/java/metadata/java.xxe.parse-request-source.json
inference/_rules/java/metadata/smoke.java.dangerous-call.json
inference/_rules/java/queries/java.access-control.idor-request-id.scm
inference/_rules/java/queries/java.cmd-injection.processbuilder.guard.scm
inference/_rules/java/queries/java.cmd-injection.processbuilder.scm
inference/_rules/java/queries/java.cmd-injection.processbuilder.scope.scm
inference/_rules/java/queries/java.cmd-injection.runtime-exec.guard.scm
inference/_rules/java/queries/java.cmd-injection.runtime-exec.scm
inference/_rules/java/queries/java.cmd-injection.runtime-exec.scope.scm
inference/_rules/java/queries/java.code-injection.groovy.scm
inference/_rules/java/queries/java.code-injection.ognl.scm
inference/_rules/java/queries/java.code-injection.script-engine.scm
inference/_rules/java/queries/java.code-injection.spel.scm
inference/_rules/java/queries/java.cra.network-impact-resilience.scm
inference/_rules/java/queries/java.cra.secure-update-channel.scm
inference/_rules/java/queries/java.csrf.disabled.scm
inference/_rules/java/queries/java.deserialization.objectinputstream-untrusted.scm
inference/_rules/java/queries/java.deserialization.readobject.scm
inference/_rules/java/queries/java.deserialization.xmldecoder.scm
inference/_rules/java/queries/java.hardcoded-secret.known-value.scm
inference/_rules/java/queries/java.hardcoded-secret.named-assignment.scm
inference/_rules/java/queries/java.open-redirect.send-redirect.guard.scm
inference/_rules/java/queries/java.open-redirect.send-redirect.scm
inference/_rules/java/queries/java.open-redirect.send-redirect.scope.scm
inference/_rules/java/queries/java.open-redirect.spring-redirect-prefix.scm
inference/_rules/java/queries/java.owasp-agentic.excessive-agency-db-destroy.scm
inference/_rules/java/queries/java.owasp-agentic.excessive-agency-exec.scm
inference/_rules/java/queries/java.owasp-agentic.excessive-agency-file-delete.scm
inference/_rules/java/queries/java.owasp-agentic.excessive-agency-network.scm
inference/_rules/java/queries/java.owasp-agentic.output-eval.scm
inference/_rules/java/queries/java.owasp-agentic.output-exec.scm
inference/_rules/java/queries/java.owasp-agentic.output-html-response.scm
inference/_rules/java/queries/java.owasp-agentic.output-sql.scm
inference/_rules/java/queries/java.owasp-agentic.prompt-injection-llm-sink.scm
inference/_rules/java/queries/java.owasp-agentic.prompt-string-concat.scm
inference/_rules/java/queries/java.owasp-agentic.sensitive-pii-in-prompt.scm
inference/_rules/java/queries/java.owasp-agentic.sensitive-secret-in-prompt.scm
inference/_rules/java/queries/java.owasp-agentic.sensitive-ssn-in-prompt.scm
inference/_rules/java/queries/java.owasp-agentic.sensitive-taint-to-llm.scm
inference/_rules/java/queries/java.path-traversal.file-from-request.scm
inference/_rules/java/queries/java.path-traversal.files-readallbytes.scm
inference/_rules/java/queries/java.path-traversal.paths-get.guard.scm
inference/_rules/java/queries/java.path-traversal.paths-get.scm
inference/_rules/java/queries/java.path-traversal.paths-get.scope.scm
inference/_rules/java/queries/java.phi-plaintext-jpa.unencrypted-column.scm
inference/_rules/java/queries/java.reclaim.access-control.missing-auth-spring-endpoint.guard.scm
inference/_rules/java/queries/java.reclaim.access-control.missing-auth-spring-endpoint.scm
inference/_rules/java/queries/java.reclaim.access-control.missing-auth-spring-endpoint.scope.scm
inference/_rules/java/queries/java.reclaim.deserialization.xstream-insecure.sanitizer.scm
inference/_rules/java/queries/java.reclaim.deserialization.xstream-insecure.scm
inference/_rules/java/queries/java.reclaim.deserialization.xstream-insecure.sink.scm
inference/_rules/java/queries/java.reclaim.deserialization.xstream-insecure.source.scm
inference/_rules/java/queries/java.reclaim.nydfs-mfa.controller-no-mfa.guard.scm
inference/_rules/java/queries/java.reclaim.nydfs-mfa.controller-no-mfa.scm
inference/_rules/java/queries/java.reclaim.nydfs-mfa.controller-no-mfa.scope.scm
inference/_rules/java/queries/java.reclaim.nydfs-mfa.servlet-login-no-mfa.guard.scm
inference/_rules/java/queries/java.reclaim.nydfs-mfa.servlet-login-no-mfa.scm
inference/_rules/java/queries/java.reclaim.nydfs-mfa.servlet-login-no-mfa.scope.scm
inference/_rules/java/queries/java.reclaim.nydfs-mfa.spring-auth-no-mfa.guard.scm
inference/_rules/java/queries/java.reclaim.nydfs-mfa.spring-auth-no-mfa.scm
inference/_rules/java/queries/java.reclaim.nydfs-mfa.spring-auth-no-mfa.scope.scm
inference/_rules/java/queries/java.reclaim.xxe.documentbuilder-chained.guard.scm
inference/_rules/java/queries/java.reclaim.xxe.documentbuilder-chained.scm
inference/_rules/java/queries/java.reclaim.xxe.documentbuilder-chained.scope.scm
inference/_rules/java/queries/java.reclaim.xxe.documentbuilder-split.guard.scm
inference/_rules/java/queries/java.reclaim.xxe.documentbuilder-split.scm
inference/_rules/java/queries/java.reclaim.xxe.documentbuilder-split.scope.scm
inference/_rules/java/queries/java.reclaim.xxe.saxparser.guard.scm
inference/_rules/java/queries/java.reclaim.xxe.saxparser.scm
inference/_rules/java/queries/java.reclaim.xxe.saxparser.scope.scm
inference/_rules/java/queries/java.reclaim.xxe.xmlinputfactory.guard.scm
inference/_rules/java/queries/java.reclaim.xxe.xmlinputfactory.scm
inference/_rules/java/queries/java.reclaim.xxe.xmlinputfactory.scope.scm
inference/_rules/java/queries/java.sensitive-data-logging.format-log.scm
inference/_rules/java/queries/java.sensitive-data-logging.log-injection.scm
inference/_rules/java/queries/java.sensitive-data-logging.logger-concat.scm
inference/_rules/java/queries/java.sensitive-data-logging.logger-param.scm
inference/_rules/java/queries/java.sensitive-data-logging.stdout.scm
inference/_rules/java/queries/java.sqli.string-concat.scm
inference/_rules/java/queries/java.sqli.string-format.scm
inference/_rules/java/queries/java.ssrf.resttemplate.guard.scm
inference/_rules/java/queries/java.ssrf.resttemplate.scm
inference/_rules/java/queries/java.ssrf.resttemplate.scope.scm
inference/_rules/java/queries/java.ssrf.url-openconnection.scm
inference/_rules/java/queries/java.weak-crypto.blowfish.scm
inference/_rules/java/queries/java.weak-crypto.des-cipher.scm
inference/_rules/java/queries/java.weak-crypto.ecb-mode.scm
inference/_rules/java/queries/java.weak-crypto.hardcoded-key.scm
inference/_rules/java/queries/java.weak-crypto.insecure-random-crypto.scm
inference/_rules/java/queries/java.weak-crypto.md5.scm
inference/_rules/java/queries/java.weak-crypto.pbkdf2-low-rounds.scm
inference/_rules/java/queries/java.weak-crypto.rc2-cipher.scm
inference/_rules/java/queries/java.weak-crypto.rc4.scm
inference/_rules/java/queries/java.weak-crypto.sha1.scm
inference/_rules/java/queries/java.weak-crypto.zero-iv.scm
inference/_rules/java/queries/java.xss.servlet-writer-direct.scm
inference/_rules/java/queries/java.xxe.parse-request-source.scm
inference/_rules/java/queries/smoke.java.dangerous-call.scm
inference/_rules/javascript/metadata/javascript.cmd-injection.exec-template-literal.json
inference/_rules/javascript/metadata/javascript.code-injection.eval-dynamic.json
inference/_rules/javascript/metadata/javascript.code-injection.function-constructor.json
inference/_rules/javascript/metadata/javascript.code-injection.settimeout-string.json
inference/_rules/javascript/metadata/javascript.cra.network-impact-resilience.json
inference/_rules/javascript/metadata/javascript.cra.secure-default-config.json
inference/_rules/javascript/metadata/javascript.cra.secure-default-cors.json
inference/_rules/javascript/metadata/javascript.cra.secure-update-channel.json
inference/_rules/javascript/metadata/javascript.csrf.samesite-none.json
inference/_rules/javascript/metadata/javascript.deserialization.node-serialize.json
inference/_rules/javascript/metadata/javascript.deserialization.yaml-load.json
inference/_rules/javascript/metadata/javascript.excessive-agency.destructive-sql.json
inference/_rules/javascript/metadata/javascript.excessive-agency.file-delete.json
inference/_rules/javascript/metadata/javascript.excessive-agency.process-spawn.json
inference/_rules/javascript/metadata/javascript.hardcoded-secret.apikey.json
inference/_rules/javascript/metadata/javascript.hardcoded-secret.aws.json
inference/_rules/javascript/metadata/javascript.hardcoded-secret.object.json
inference/_rules/javascript/metadata/javascript.hardcoded-secret.password.json
inference/_rules/javascript/metadata/javascript.hardcoded-secret.private-key.json
inference/_rules/javascript/metadata/javascript.hardcoded-secret.stripe.json
inference/_rules/javascript/metadata/javascript.hardcoded-secret.token.json
inference/_rules/javascript/metadata/javascript.insecure-output.llm-code-construction.json
inference/_rules/javascript/metadata/javascript.insecure-output.llm-dangerous-html.json
inference/_rules/javascript/metadata/javascript.insecure-output.llm-innerhtml.json
inference/_rules/javascript/metadata/javascript.missing-auth.express-state-changing-route.json
inference/_rules/javascript/metadata/javascript.nosql-injection.request-operator-value.json
inference/_rules/javascript/metadata/javascript.nosql-injection.where-operator.json
inference/_rules/javascript/metadata/javascript.open-redirect.window-location-assignment.json
inference/_rules/javascript/metadata/javascript.path-traversal.fs-template-literal.json
inference/_rules/javascript/metadata/javascript.phi-mongoose.cc-plaintext.json
inference/_rules/javascript/metadata/javascript.phi-mongoose.dob-plaintext.json
inference/_rules/javascript/metadata/javascript.phi-mongoose.medical-plaintext.json
inference/_rules/javascript/metadata/javascript.phi-mongoose.ssn-plaintext.json
inference/_rules/javascript/metadata/javascript.phi-sequelize.cc-plaintext.json
inference/_rules/javascript/metadata/javascript.phi-sequelize.dob-plaintext.json
inference/_rules/javascript/metadata/javascript.phi-sequelize.medical-plaintext.json
inference/_rules/javascript/metadata/javascript.phi-sequelize.ssn-plaintext.json
inference/_rules/javascript/metadata/javascript.plaintext-password.request-assign.json
inference/_rules/javascript/metadata/javascript.plaintext-password.strict-compare.json
inference/_rules/javascript/metadata/javascript.prompt-injection.langchain-user-input.json
inference/_rules/javascript/metadata/javascript.prompt-injection.message-template-literal.json
inference/_rules/javascript/metadata/javascript.reclaim.csrf-disabled.json
inference/_rules/javascript/metadata/javascript.reclaim.idor-findbyid.json
inference/_rules/javascript/metadata/javascript.reclaim.idor-horizontal-escalation.json
inference/_rules/javascript/metadata/javascript.reclaim.nosql-injection-taint.json
inference/_rules/javascript/metadata/javascript.reclaim.nydfs-mfa-bcrypt-no-mfa.json
inference/_rules/javascript/metadata/javascript.reclaim.nydfs-mfa-passport-no-mfa.json
inference/_rules/javascript/metadata/javascript.reclaim.plaintext-password-insert.json
inference/_rules/javascript/metadata/javascript.reclaim.prompt-injection-anthropic.json
inference/_rules/javascript/metadata/javascript.reclaim.prompt-injection-openai.json
inference/_rules/javascript/metadata/javascript.reclaim.xxe-taint.json
inference/_rules/javascript/metadata/javascript.redos.nested-quantifier.json
inference/_rules/javascript/metadata/javascript.sensitive-data-logging.console-template.json
inference/_rules/javascript/metadata/javascript.sensitive-data-logging.logger-template.json
inference/_rules/javascript/metadata/javascript.sensitive-data.bank-plaintext.json
inference/_rules/javascript/metadata/javascript.sensitive-data.dob-plaintext.json
inference/_rules/javascript/metadata/javascript.sensitive-data.ssn-plaintext.json
inference/_rules/javascript/metadata/javascript.sensitive-info.pii-in-prompt.json
inference/_rules/javascript/metadata/javascript.sensitive-info.secret-in-prompt.json
inference/_rules/javascript/metadata/javascript.session-fixation.login-no-regenerate.json
inference/_rules/javascript/metadata/javascript.session-fixation.session-id-from-request.json
inference/_rules/javascript/metadata/javascript.sqli.template-literal.json
inference/_rules/javascript/metadata/javascript.ssrf.fetch-from-request.json
inference/_rules/javascript/metadata/javascript.template-security.autoescape-disabled.json
inference/_rules/javascript/metadata/javascript.weak-crypto.blowfish.json
inference/_rules/javascript/metadata/javascript.weak-crypto.des.json
inference/_rules/javascript/metadata/javascript.weak-crypto.ecb.json
inference/_rules/javascript/metadata/javascript.weak-crypto.md5.json
inference/_rules/javascript/metadata/javascript.weak-crypto.rc2.json
inference/_rules/javascript/metadata/javascript.weak-crypto.rc4.json
inference/_rules/javascript/metadata/javascript.weak-crypto.sha1.json
inference/_rules/javascript/metadata/javascript.xss.document-write-dynamic.json
inference/_rules/javascript/metadata/javascript.xss.innerhtml-dynamic.json
inference/_rules/javascript/metadata/javascript.xxe.libxmljs-no-options.json
inference/_rules/javascript/metadata/javascript.xxe.libxmljs-noent-true.json
inference/_rules/javascript/metadata/javascript.xxe.xml2js-parser-parsestring.json
inference/_rules/javascript/metadata/smoke.javascript.dangerous-call.json
inference/_rules/javascript/queries/javascript.cmd-injection.exec-template-literal.scm
inference/_rules/javascript/queries/javascript.code-injection.eval-dynamic.scm
inference/_rules/javascript/queries/javascript.code-injection.function-constructor.scm
inference/_rules/javascript/queries/javascript.code-injection.settimeout-string.scm
inference/_rules/javascript/queries/javascript.cra.network-impact-resilience.scm
inference/_rules/javascript/queries/javascript.cra.secure-default-config.scm
inference/_rules/javascript/queries/javascript.cra.secure-default-cors.scm
inference/_rules/javascript/queries/javascript.cra.secure-update-channel.scm
inference/_rules/javascript/queries/javascript.csrf.samesite-none.scm
inference/_rules/javascript/queries/javascript.deserialization.node-serialize.scm
inference/_rules/javascript/queries/javascript.deserialization.yaml-load.scm
inference/_rules/javascript/queries/javascript.excessive-agency.destructive-sql.scm
inference/_rules/javascript/queries/javascript.excessive-agency.file-delete.scm
inference/_rules/javascript/queries/javascript.excessive-agency.process-spawn.scm
inference/_rules/javascript/queries/javascript.hardcoded-secret.apikey.scm
inference/_rules/javascript/queries/javascript.hardcoded-secret.aws.scm
inference/_rules/javascript/queries/javascript.hardcoded-secret.object.scm
inference/_rules/javascript/queries/javascript.hardcoded-secret.password.scm
inference/_rules/javascript/queries/javascript.hardcoded-secret.private-key.scm
inference/_rules/javascript/queries/javascript.hardcoded-secret.stripe.scm
inference/_rules/javascript/queries/javascript.hardcoded-secret.token.scm
inference/_rules/javascript/queries/javascript.insecure-output.llm-code-construction.scm
inference/_rules/javascript/queries/javascript.insecure-output.llm-dangerous-html.scm
inference/_rules/javascript/queries/javascript.insecure-output.llm-innerhtml.scm
inference/_rules/javascript/queries/javascript.missing-auth.express-state-changing-route.scm
inference/_rules/javascript/queries/javascript.nosql-injection.request-operator-value.scm
inference/_rules/javascript/queries/javascript.nosql-injection.where-operator.scm
inference/_rules/javascript/queries/javascript.open-redirect.window-location-assignment.scm
inference/_rules/javascript/queries/javascript.path-traversal.fs-template-literal.scm
inference/_rules/javascript/queries/javascript.phi-mongoose.cc-plaintext.scm
inference/_rules/javascript/queries/javascript.phi-mongoose.dob-plaintext.scm
inference/_rules/javascript/queries/javascript.phi-mongoose.medical-plaintext.scm
inference/_rules/javascript/queries/javascript.phi-mongoose.ssn-plaintext.scm
inference/_rules/javascript/queries/javascript.phi-sequelize.cc-plaintext.scm
inference/_rules/javascript/queries/javascript.phi-sequelize.dob-plaintext.scm
inference/_rules/javascript/queries/javascript.phi-sequelize.medical-plaintext.scm
inference/_rules/javascript/queries/javascript.phi-sequelize.ssn-plaintext.scm
inference/_rules/javascript/queries/javascript.plaintext-password.request-assign.scm
inference/_rules/javascript/queries/javascript.plaintext-password.strict-compare.scm
inference/_rules/javascript/queries/javascript.prompt-injection.langchain-user-input.scm
inference/_rules/javascript/queries/javascript.prompt-injection.message-template-literal.scm
inference/_rules/javascript/queries/javascript.reclaim.csrf-disabled.guard.scm
inference/_rules/javascript/queries/javascript.reclaim.csrf-disabled.scm
inference/_rules/javascript/queries/javascript.reclaim.csrf-disabled.scope.scm
inference/_rules/javascript/queries/javascript.reclaim.idor-findbyid.sanitizer.scm
inference/_rules/javascript/queries/javascript.reclaim.idor-findbyid.scm
inference/_rules/javascript/queries/javascript.reclaim.idor-findbyid.sink.scm
inference/_rules/javascript/queries/javascript.reclaim.idor-findbyid.source.scm
inference/_rules/javascript/queries/javascript.reclaim.idor-horizontal-escalation.sanitizer.scm
inference/_rules/javascript/queries/javascript.reclaim.idor-horizontal-escalation.scm
inference/_rules/javascript/queries/javascript.reclaim.idor-horizontal-escalation.sink.scm
inference/_rules/javascript/queries/javascript.reclaim.idor-horizontal-escalation.source.scm
inference/_rules/javascript/queries/javascript.reclaim.nosql-injection-taint.sanitizer.scm
inference/_rules/javascript/queries/javascript.reclaim.nosql-injection-taint.scm
inference/_rules/javascript/queries/javascript.reclaim.nosql-injection-taint.sink.scm
inference/_rules/javascript/queries/javascript.reclaim.nosql-injection-taint.source.scm
inference/_rules/javascript/queries/javascript.reclaim.nydfs-mfa-bcrypt-no-mfa.guard.scm
inference/_rules/javascript/queries/javascript.reclaim.nydfs-mfa-bcrypt-no-mfa.scm
inference/_rules/javascript/queries/javascript.reclaim.nydfs-mfa-bcrypt-no-mfa.scope.scm
inference/_rules/javascript/queries/javascript.reclaim.nydfs-mfa-passport-no-mfa.guard.scm
inference/_rules/javascript/queries/javascript.reclaim.nydfs-mfa-passport-no-mfa.scm
inference/_rules/javascript/queries/javascript.reclaim.nydfs-mfa-passport-no-mfa.scope.scm
inference/_rules/javascript/queries/javascript.reclaim.plaintext-password-insert.guard.scm
inference/_rules/javascript/queries/javascript.reclaim.plaintext-password-insert.scm
inference/_rules/javascript/queries/javascript.reclaim.plaintext-password-insert.scope.scm
inference/_rules/javascript/queries/javascript.reclaim.prompt-injection-anthropic.sanitizer.scm
inference/_rules/javascript/queries/javascript.reclaim.prompt-injection-anthropic.scm
inference/_rules/javascript/queries/javascript.reclaim.prompt-injection-anthropic.sink.scm
inference/_rules/javascript/queries/javascript.reclaim.prompt-injection-anthropic.source.scm
inference/_rules/javascript/queries/javascript.reclaim.prompt-injection-openai.sanitizer.scm
inference/_rules/javascript/queries/javascript.reclaim.prompt-injection-openai.scm
inference/_rules/javascript/queries/javascript.reclaim.prompt-injection-openai.sink.scm
inference/_rules/javascript/queries/javascript.reclaim.prompt-injection-openai.source.scm
inference/_rules/javascript/queries/javascript.reclaim.xxe-taint.sanitizer.scm
inference/_rules/javascript/queries/javascript.reclaim.xxe-taint.scm
inference/_rules/javascript/queries/javascript.reclaim.xxe-taint.sink.scm
inference/_rules/javascript/queries/javascript.reclaim.xxe-taint.source.scm
inference/_rules/javascript/queries/javascript.redos.nested-quantifier.scm
inference/_rules/javascript/queries/javascript.sensitive-data-logging.console-template.scm
inference/_rules/javascript/queries/javascript.sensitive-data-logging.logger-template.scm
inference/_rules/javascript/queries/javascript.sensitive-data.bank-plaintext.scm
inference/_rules/javascript/queries/javascript.sensitive-data.dob-plaintext.scm
inference/_rules/javascript/queries/javascript.sensitive-data.ssn-plaintext.scm
inference/_rules/javascript/queries/javascript.sensitive-info.pii-in-prompt.scm
inference/_rules/javascript/queries/javascript.sensitive-info.secret-in-prompt.scm
inference/_rules/javascript/queries/javascript.session-fixation.login-no-regenerate.scm
inference/_rules/javascript/queries/javascript.session-fixation.session-id-from-request.scm
inference/_rules/javascript/queries/javascript.sqli.template-literal.scm
inference/_rules/javascript/queries/javascript.ssrf.fetch-from-request.scm
inference/_rules/javascript/queries/javascript.template-security.autoescape-disabled.scm
inference/_rules/javascript/queries/javascript.weak-crypto.blowfish.scm
inference/_rules/javascript/queries/javascript.weak-crypto.des.scm
inference/_rules/javascript/queries/javascript.weak-crypto.ecb.scm
inference/_rules/javascript/queries/javascript.weak-crypto.md5.scm
inference/_rules/javascript/queries/javascript.weak-crypto.rc2.scm
inference/_rules/javascript/queries/javascript.weak-crypto.rc4.scm
inference/_rules/javascript/queries/javascript.weak-crypto.sha1.scm
inference/_rules/javascript/queries/javascript.xss.document-write-dynamic.scm
inference/_rules/javascript/queries/javascript.xss.innerhtml-dynamic.scm
inference/_rules/javascript/queries/javascript.xxe.libxmljs-no-options.scm
inference/_rules/javascript/queries/javascript.xxe.libxmljs-noent-true.scm
inference/_rules/javascript/queries/javascript.xxe.xml2js-parser-parsestring.scm
inference/_rules/javascript/queries/smoke.javascript.dangerous-call.scm
inference/_rules/kotlin/metadata/kotlin.cmd-injection.process-builder.json
inference/_rules/kotlin/metadata/kotlin.cmd-injection.runtime-exec.json
inference/_rules/kotlin/metadata/kotlin.cmd-injection.shell-c.json
inference/_rules/kotlin/metadata/kotlin.code-injection.kts-host-eval.json
inference/_rules/kotlin/metadata/kotlin.code-injection.process-template.json
inference/_rules/kotlin/metadata/kotlin.code-injection.script-engine-eval.json
inference/_rules/kotlin/metadata/kotlin.code-injection.spel-parse.json
inference/_rules/kotlin/metadata/kotlin.csrf.spring-disabled.json
inference/_rules/kotlin/metadata/kotlin.deserialization.jackson-class-forname.json
inference/_rules/kotlin/metadata/kotlin.deserialization.jackson-default-typing.json
inference/_rules/kotlin/metadata/kotlin.deserialization.kryo-readobject.json
inference/_rules/kotlin/metadata/kotlin.deserialization.readobject.json
inference/_rules/kotlin/metadata/kotlin.hardcoded-credentials.password-comparison.json
inference/_rules/kotlin/metadata/kotlin.hardcoded-credentials.plaintext-password-storage.json
inference/_rules/kotlin/metadata/kotlin.insecure-http.interpolation.json
inference/_rules/kotlin/metadata/kotlin.insecure-http.retrofit-baseurl.json
inference/_rules/kotlin/metadata/kotlin.insecure-http.url-literal.json
inference/_rules/kotlin/metadata/kotlin.insecure-storage.get-shared-prefs.json
inference/_rules/kotlin/metadata/kotlin.insecure-storage.mode-world.json
inference/_rules/kotlin/metadata/kotlin.insecure-storage.putvalue-sensitive.json
inference/_rules/kotlin/metadata/kotlin.insecure-storage.sharedprefs.json
inference/_rules/kotlin/metadata/kotlin.open-redirect.ktor-respond.json
inference/_rules/kotlin/metadata/kotlin.open-redirect.spring-redirect-string.json
inference/_rules/kotlin/metadata/kotlin.owasp-agentic.excessive-agency-db-destroy.json
inference/_rules/kotlin/metadata/kotlin.owasp-agentic.excessive-agency-file-delete.json
inference/_rules/kotlin/metadata/kotlin.owasp-agentic.excessive-agency-network.json
inference/_rules/kotlin/metadata/kotlin.owasp-agentic.excessive-agency-process.json
inference/_rules/kotlin/metadata/kotlin.owasp-agentic.output-eval.json
inference/_rules/kotlin/metadata/kotlin.owasp-agentic.output-html-response.json
inference/_rules/kotlin/metadata/kotlin.owasp-agentic.output-process.json
inference/_rules/kotlin/metadata/kotlin.owasp-agentic.output-sql.json
inference/_rules/kotlin/metadata/kotlin.owasp-agentic.prompt-injection-anthropic.json
inference/_rules/kotlin/metadata/kotlin.owasp-agentic.prompt-injection-langchain4j.json
inference/_rules/kotlin/metadata/kotlin.owasp-agentic.prompt-injection-openai.json
inference/_rules/kotlin/metadata/kotlin.owasp-agentic.prompt-string-template.json
inference/_rules/kotlin/metadata/kotlin.owasp-agentic.sensitive-pii-in-prompt.json
inference/_rules/kotlin/metadata/kotlin.owasp-agentic.sensitive-secret-in-prompt.json
inference/_rules/kotlin/metadata/kotlin.owasp-agentic.sensitive-ssn-in-prompt.json
inference/_rules/kotlin/metadata/kotlin.owasp-agentic.sensitive-taint-to-llm.json
inference/_rules/kotlin/metadata/kotlin.path-traversal.android-open-file-input.json
inference/_rules/kotlin/metadata/kotlin.path-traversal.file-concat.json
inference/_rules/kotlin/metadata/kotlin.path-traversal.file-from-request.json
inference/_rules/kotlin/metadata/kotlin.path-traversal.file-template.json
inference/_rules/kotlin/metadata/kotlin.path-traversal.path-resolve-user-input.json
inference/_rules/kotlin/metadata/kotlin.phi-plaintext.cc-exposed.json
inference/_rules/kotlin/metadata/kotlin.phi-plaintext.dob-exposed.json
inference/_rules/kotlin/metadata/kotlin.phi-plaintext.ktorm-ssn.json
inference/_rules/kotlin/metadata/kotlin.phi-plaintext.medical-exposed.json
inference/_rules/kotlin/metadata/kotlin.phi-plaintext.ssn-exposed.json
inference/_rules/kotlin/metadata/kotlin.reclaim.csrf-ktor-no-protection.json
inference/_rules/kotlin/metadata/kotlin.reclaim.nydfs-mfa-controller-no-mfa.json
inference/_rules/kotlin/metadata/kotlin.reclaim.nydfs-mfa-password-match-no-mfa.json
inference/_rules/kotlin/metadata/kotlin.reclaim.nydfs-mfa-spring-auth-no-mfa.json
inference/_rules/kotlin/metadata/kotlin.reclaim.xxe-documentbuilder.json
inference/_rules/kotlin/metadata/kotlin.reclaim.xxe-saxparser.json
inference/_rules/kotlin/metadata/kotlin.reclaim.xxe-xmlinputfactory.json
inference/_rules/kotlin/metadata/kotlin.sensitive-logging.android-log.json
inference/_rules/kotlin/metadata/kotlin.sensitive-logging.println.json
inference/_rules/kotlin/metadata/kotlin.sensitive-logging.slf4j.json
inference/_rules/kotlin/metadata/kotlin.sqli.android-raw-query.json
inference/_rules/kotlin/metadata/kotlin.sqli.compile-statement-template.json
inference/_rules/kotlin/metadata/kotlin.sqli.string-template.json
inference/_rules/kotlin/metadata/kotlin.ssrf.url-openconnection.json
inference/_rules/kotlin/metadata/kotlin.weak-crypto.blowfish-cipher.json
inference/_rules/kotlin/metadata/kotlin.weak-crypto.cipher-no-iv.json
inference/_rules/kotlin/metadata/kotlin.weak-crypto.des-cipher.json
inference/_rules/kotlin/metadata/kotlin.weak-crypto.ecb-mode.json
inference/_rules/kotlin/metadata/kotlin.weak-crypto.hardcoded-key.json
inference/_rules/kotlin/metadata/kotlin.weak-crypto.insecure-random.json
inference/_rules/kotlin/metadata/kotlin.weak-crypto.md5.json
inference/_rules/kotlin/metadata/kotlin.weak-crypto.rc4-cipher.json
inference/_rules/kotlin/metadata/kotlin.weak-crypto.sha1.json
inference/_rules/kotlin/metadata/kotlin.xss.android-webview.json
inference/_rules/kotlin/metadata/kotlin.xss.html-string-building.json
inference/_rules/kotlin/metadata/kotlin.xss.ktor-html-unsafe.json
inference/_rules/kotlin/metadata/kotlin.xss.servlet-writer-direct.json
inference/_rules/kotlin/metadata/smoke.kotlin.dangerous-call.json
inference/_rules/kotlin/queries/kotlin.cmd-injection.process-builder.scm
inference/_rules/kotlin/queries/kotlin.cmd-injection.runtime-exec.scm
inference/_rules/kotlin/queries/kotlin.cmd-injection.shell-c.scm
inference/_rules/kotlin/queries/kotlin.code-injection.kts-host-eval.scm
inference/_rules/kotlin/queries/kotlin.code-injection.process-template.scm
inference/_rules/kotlin/queries/kotlin.code-injection.script-engine-eval.scm
inference/_rules/kotlin/queries/kotlin.code-injection.spel-parse.scm
inference/_rules/kotlin/queries/kotlin.csrf.spring-disabled.scm
inference/_rules/kotlin/queries/kotlin.deserialization.jackson-class-forname.scm
inference/_rules/kotlin/queries/kotlin.deserialization.jackson-default-typing.scm
inference/_rules/kotlin/queries/kotlin.deserialization.kryo-readobject.scm
inference/_rules/kotlin/queries/kotlin.deserialization.readobject.scm
inference/_rules/kotlin/queries/kotlin.hardcoded-credentials.password-comparison.scm
inference/_rules/kotlin/queries/kotlin.hardcoded-credentials.plaintext-password-storage.scm
inference/_rules/kotlin/queries/kotlin.insecure-http.interpolation.scm
inference/_rules/kotlin/queries/kotlin.insecure-http.retrofit-baseurl.scm
inference/_rules/kotlin/queries/kotlin.insecure-http.url-literal.scm
inference/_rules/kotlin/queries/kotlin.insecure-storage.get-shared-prefs.scm
inference/_rules/kotlin/queries/kotlin.insecure-storage.mode-world.scm
inference/_rules/kotlin/queries/kotlin.insecure-storage.putvalue-sensitive.scm
inference/_rules/kotlin/queries/kotlin.insecure-storage.sharedprefs.scm
inference/_rules/kotlin/queries/kotlin.open-redirect.ktor-respond.scm
inference/_rules/kotlin/queries/kotlin.open-redirect.spring-redirect-string.scm
inference/_rules/kotlin/queries/kotlin.owasp-agentic.excessive-agency-db-destroy.scm
inference/_rules/kotlin/queries/kotlin.owasp-agentic.excessive-agency-file-delete.scm
inference/_rules/kotlin/queries/kotlin.owasp-agentic.excessive-agency-network.scm
inference/_rules/kotlin/queries/kotlin.owasp-agentic.excessive-agency-process.scm
inference/_rules/kotlin/queries/kotlin.owasp-agentic.output-eval.scm
inference/_rules/kotlin/queries/kotlin.owasp-agentic.output-html-response.scm
inference/_rules/kotlin/queries/kotlin.owasp-agentic.output-process.scm
inference/_rules/kotlin/queries/kotlin.owasp-agentic.output-sql.scm
inference/_rules/kotlin/queries/kotlin.owasp-agentic.prompt-injection-anthropic.scm
inference/_rules/kotlin/queries/kotlin.owasp-agentic.prompt-injection-langchain4j.scm
inference/_rules/kotlin/queries/kotlin.owasp-agentic.prompt-injection-openai.scm
inference/_rules/kotlin/queries/kotlin.owasp-agentic.prompt-string-template.scm
inference/_rules/kotlin/queries/kotlin.owasp-agentic.sensitive-pii-in-prompt.scm
inference/_rules/kotlin/queries/kotlin.owasp-agentic.sensitive-secret-in-prompt.scm
inference/_rules/kotlin/queries/kotlin.owasp-agentic.sensitive-ssn-in-prompt.scm
inference/_rules/kotlin/queries/kotlin.owasp-agentic.sensitive-taint-to-llm.scm
inference/_rules/kotlin/queries/kotlin.path-traversal.android-open-file-input.scm
inference/_rules/kotlin/queries/kotlin.path-traversal.file-concat.scm
inference/_rules/kotlin/queries/kotlin.path-traversal.file-from-request.scm
inference/_rules/kotlin/queries/kotlin.path-traversal.file-template.scm
inference/_rules/kotlin/queries/kotlin.path-traversal.path-resolve-user-input.scm
inference/_rules/kotlin/queries/kotlin.phi-plaintext.cc-exposed.scm
inference/_rules/kotlin/queries/kotlin.phi-plaintext.dob-exposed.scm
inference/_rules/kotlin/queries/kotlin.phi-plaintext.ktorm-ssn.scm
inference/_rules/kotlin/queries/kotlin.phi-plaintext.medical-exposed.scm
inference/_rules/kotlin/queries/kotlin.phi-plaintext.ssn-exposed.scm
inference/_rules/kotlin/queries/kotlin.reclaim.csrf-ktor-no-protection.guard.scm
inference/_rules/kotlin/queries/kotlin.reclaim.csrf-ktor-no-protection.scm
inference/_rules/kotlin/queries/kotlin.reclaim.csrf-ktor-no-protection.scope.scm
inference/_rules/kotlin/queries/kotlin.reclaim.nydfs-mfa-controller-no-mfa.guard.scm
inference/_rules/kotlin/queries/kotlin.reclaim.nydfs-mfa-controller-no-mfa.scm
inference/_rules/kotlin/queries/kotlin.reclaim.nydfs-mfa-controller-no-mfa.scope.scm
inference/_rules/kotlin/queries/kotlin.reclaim.nydfs-mfa-password-match-no-mfa.guard.scm
inference/_rules/kotlin/queries/kotlin.reclaim.nydfs-mfa-password-match-no-mfa.scm
inference/_rules/kotlin/queries/kotlin.reclaim.nydfs-mfa-password-match-no-mfa.scope.scm
inference/_rules/kotlin/queries/kotlin.reclaim.nydfs-mfa-spring-auth-no-mfa.guard.scm
inference/_rules/kotlin/queries/kotlin.reclaim.nydfs-mfa-spring-auth-no-mfa.scm
inference/_rules/kotlin/queries/kotlin.reclaim.nydfs-mfa-spring-auth-no-mfa.scope.scm
inference/_rules/kotlin/queries/kotlin.reclaim.xxe-documentbuilder.guard.scm
inference/_rules/kotlin/queries/kotlin.reclaim.xxe-documentbuilder.scm
inference/_rules/kotlin/queries/kotlin.reclaim.xxe-documentbuilder.scope.scm
inference/_rules/kotlin/queries/kotlin.reclaim.xxe-saxparser.guard.scm
inference/_rules/kotlin/queries/kotlin.reclaim.xxe-saxparser.scm
inference/_rules/kotlin/queries/kotlin.reclaim.xxe-saxparser.scope.scm
inference/_rules/kotlin/queries/kotlin.reclaim.xxe-xmlinputfactory.guard.scm
inference/_rules/kotlin/queries/kotlin.reclaim.xxe-xmlinputfactory.scm
inference/_rules/kotlin/queries/kotlin.reclaim.xxe-xmlinputfactory.scope.scm
inference/_rules/kotlin/queries/kotlin.sensitive-logging.android-log.scm
inference/_rules/kotlin/queries/kotlin.sensitive-logging.println.scm
inference/_rules/kotlin/queries/kotlin.sensitive-logging.slf4j.scm
inference/_rules/kotlin/queries/kotlin.sqli.android-raw-query.scm
inference/_rules/kotlin/queries/kotlin.sqli.compile-statement-template.scm
inference/_rules/kotlin/queries/kotlin.sqli.string-template.scm
inference/_rules/kotlin/queries/kotlin.ssrf.url-openconnection.scm
inference/_rules/kotlin/queries/kotlin.weak-crypto.blowfish-cipher.scm
inference/_rules/kotlin/queries/kotlin.weak-crypto.cipher-no-iv.scm
inference/_rules/kotlin/queries/kotlin.weak-crypto.des-cipher.scm
inference/_rules/kotlin/queries/kotlin.weak-crypto.ecb-mode.scm
inference/_rules/kotlin/queries/kotlin.weak-crypto.hardcoded-key.scm
inference/_rules/kotlin/queries/kotlin.weak-crypto.insecure-random.scm
inference/_rules/kotlin/queries/kotlin.weak-crypto.md5.scm
inference/_rules/kotlin/queries/kotlin.weak-crypto.rc4-cipher.scm
inference/_rules/kotlin/queries/kotlin.weak-crypto.sha1.scm
inference/_rules/kotlin/queries/kotlin.xss.android-webview.scm
inference/_rules/kotlin/queries/kotlin.xss.html-string-building.scm
inference/_rules/kotlin/queries/kotlin.xss.ktor-html-unsafe.scm
inference/_rules/kotlin/queries/kotlin.xss.servlet-writer-direct.scm
inference/_rules/kotlin/queries/smoke.kotlin.dangerous-call.scm
inference/_rules/php/metadata/php.code-injection.create-function.json
inference/_rules/php/metadata/php.code-injection.eval-superglobal.json
inference/_rules/php/metadata/php.code-injection.preg-replace-eval-modifier.json
inference/_rules/php/metadata/php.command-injection.exec-concat-superglobal.json
inference/_rules/php/metadata/php.cra.network-impact-resilience.json
inference/_rules/php/metadata/php.cra.secure-update-channel.json
inference/_rules/php/metadata/php.deserialization.unserialize-no-allowed-classes.json
inference/_rules/php/metadata/php.deserialization.unserialize-superglobal.json
inference/_rules/php/metadata/php.file-upload.move-uploaded-file.json
inference/_rules/php/metadata/php.hardcoded-secret.apikey-var.json
inference/_rules/php/metadata/php.hardcoded-secret.aws-var.json
inference/_rules/php/metadata/php.hardcoded-secret.define-const.json
inference/_rules/php/metadata/php.hardcoded-secret.password-var.json
inference/_rules/php/metadata/php.hardcoded-secret.private-key-pem.json
inference/_rules/php/metadata/php.hardcoded-secret.token-var.json
inference/_rules/php/metadata/php.logging.debug-dump-sensitive-var.json
inference/_rules/php/metadata/php.logging.error-log-sensitive-var.json
inference/_rules/php/metadata/php.logging.psr3-sensitive-var.json
inference/_rules/php/metadata/php.open-redirect.header-location-superglobal.json
inference/_rules/php/metadata/php.owasp-agentic.output-handling-sql-concat.json
inference/_rules/php/metadata/php.owasp-agentic.prompt-injection-concat.json
inference/_rules/php/metadata/php.path-traversal.file-op-superglobal.json
inference/_rules/php/metadata/php.path-traversal.include-superglobal.json
inference/_rules/php/metadata/php.path-traversal.require-superglobal.json
inference/_rules/php/metadata/php.phi.eloquent-attributes-sensitive.json
inference/_rules/php/metadata/php.phi.migration-string-column-sensitive.json
inference/_rules/php/metadata/php.phi.migration-text-column-sensitive.json
inference/_rules/php/metadata/php.reclaim.auth-no-rate-limit.json
inference/_rules/php/metadata/php.reclaim.bac-cookie-authz.json
inference/_rules/php/metadata/php.reclaim.code-injection-taint.json
inference/_rules/php/metadata/php.reclaim.command-injection-taint.json
inference/_rules/php/metadata/php.reclaim.csrf-get-password.json
inference/_rules/php/metadata/php.reclaim.deserialization-taint.json
inference/_rules/php/metadata/php.reclaim.file-upload-path.json
inference/_rules/php/metadata/php.reclaim.file-var-from-user-input.json
inference/_rules/php/metadata/php.reclaim.hardcoded-key.json
inference/_rules/php/metadata/php.reclaim.idor-eloquent-find.json
inference/_rules/php/metadata/php.reclaim.idor-horizontal-escalation.json
inference/_rules/php/metadata/php.reclaim.missing-auth-laravel-route.json
inference/_rules/php/metadata/php.reclaim.nydfs-mfa-laravel-auth-no-mfa.json
inference/_rules/php/metadata/php.reclaim.nydfs-mfa-password-verify-no-mfa.json
inference/_rules/php/metadata/php.reclaim.open-redirect-taint.json
inference/_rules/php/metadata/php.reclaim.owasp-agentic-excessive-agency-db-mutation.json
inference/_rules/php/metadata/php.reclaim.owasp-agentic-excessive-agency-exec.json
inference/_rules/php/metadata/php.reclaim.owasp-agentic-excessive-agency-file-write.json
inference/_rules/php/metadata/php.reclaim.owasp-agentic-output-handling-echo.json
inference/_rules/php/metadata/php.reclaim.owasp-agentic-output-handling-eval.json
inference/_rules/php/metadata/php.reclaim.owasp-agentic-output-handling-exec.json
inference/_rules/php/metadata/php.reclaim.owasp-agentic-prompt-injection-llphant.json
inference/_rules/php/metadata/php.reclaim.owasp-agentic-prompt-injection-openai.json
inference/_rules/php/metadata/php.reclaim.owasp-agentic-sensitive-info-config.json
inference/_rules/php/metadata/php.reclaim.owasp-agentic-sensitive-info-env.json
inference/_rules/php/metadata/php.reclaim.path-traversal-taint.json
inference/_rules/php/metadata/php.reclaim.sql-injection-taint.json
inference/_rules/php/metadata/php.reclaim.sql-query-var-execute.json
inference/_rules/php/metadata/php.reclaim.sql-string-concat-var.json
inference/_rules/php/metadata/php.reclaim.ssrf-taint.json
inference/_rules/php/metadata/php.reclaim.weak-hash-md5-session.json
inference/_rules/php/metadata/php.reclaim.weak-session-id-sequential.json
inference/_rules/php/metadata/php.reclaim.weak-session-id-time.json
inference/_rules/php/metadata/php.reclaim.xss-stored-weak-preg-replace.json
inference/_rules/php/metadata/php.reclaim.xss-stored-weak-str-replace.json
inference/_rules/php/metadata/php.reclaim.xss-taint.json
inference/_rules/php/metadata/php.reclaim.xss-weak-sanitize-interpolation.json
inference/_rules/php/metadata/php.reclaim.xss-weak-sanitize-post.json
inference/_rules/php/metadata/php.reclaim.xxe-taint.json
inference/_rules/php/metadata/php.reclaim.zero-iv.json
inference/_rules/php/metadata/php.sqli.mysqli-query-concat-superglobal.json
inference/_rules/php/metadata/php.sqli.pdo-query-interpolation-superglobal.json
inference/_rules/php/metadata/php.ssrf.url-fetch-superglobal.json
inference/_rules/php/metadata/php.weak-crypto.blowfish.json
inference/_rules/php/metadata/php.weak-crypto.mcrypt-des.json
inference/_rules/php/metadata/php.weak-crypto.md5-any.json
inference/_rules/php/metadata/php.weak-crypto.md5-password-arg.json
inference/_rules/php/metadata/php.weak-crypto.openssl-des.json
inference/_rules/php/metadata/php.weak-crypto.openssl-ecb.json
inference/_rules/php/metadata/php.weak-crypto.openssl-rc4.json
inference/_rules/php/metadata/php.weak-crypto.sha1-any.json
inference/_rules/php/metadata/php.xss.echo-concat-superglobal.json
inference/_rules/php/metadata/php.xss.echo-interpolation-superglobal.json
inference/_rules/php/metadata/php.xss.echo-superglobal.json
inference/_rules/php/metadata/php.xss.weak-stripos-script-filter.json
inference/_rules/php/metadata/php.xxe.domdocument-loadxml.json
inference/_rules/php/metadata/php.xxe.simplexml-load-string.json
inference/_rules/php/queries/php.code-injection.create-function.scm
inference/_rules/php/queries/php.code-injection.eval-superglobal.scm
inference/_rules/php/queries/php.code-injection.preg-replace-eval-modifier.scm
inference/_rules/php/queries/php.command-injection.exec-concat-superglobal.scm
inference/_rules/php/queries/php.cra.network-impact-resilience.scm
inference/_rules/php/queries/php.cra.secure-update-channel.scm
inference/_rules/php/queries/php.deserialization.unserialize-no-allowed-classes.scm
inference/_rules/php/queries/php.deserialization.unserialize-superglobal.scm
inference/_rules/php/queries/php.file-upload.move-uploaded-file.scm
inference/_rules/php/queries/php.hardcoded-secret.apikey-var.scm
inference/_rules/php/queries/php.hardcoded-secret.aws-var.scm
inference/_rules/php/queries/php.hardcoded-secret.define-const.scm
inference/_rules/php/queries/php.hardcoded-secret.password-var.scm
inference/_rules/php/queries/php.hardcoded-secret.private-key-pem.scm
inference/_rules/php/queries/php.hardcoded-secret.token-var.scm
inference/_rules/php/queries/php.logging.debug-dump-sensitive-var.scm
inference/_rules/php/queries/php.logging.error-log-sensitive-var.scm
inference/_rules/php/queries/php.logging.psr3-sensitive-var.scm
inference/_rules/php/queries/php.open-redirect.header-location-superglobal.scm
inference/_rules/php/queries/php.owasp-agentic.output-handling-sql-concat.scm
inference/_rules/php/queries/php.owasp-agentic.prompt-injection-concat.scm
inference/_rules/php/queries/php.path-traversal.file-op-superglobal.scm
inference/_rules/php/queries/php.path-traversal.include-superglobal.scm
inference/_rules/php/queries/php.path-traversal.require-superglobal.scm
inference/_rules/php/queries/php.phi.eloquent-attributes-sensitive.scm
inference/_rules/php/queries/php.phi.migration-string-column-sensitive.scm
inference/_rules/php/queries/php.phi.migration-text-column-sensitive.scm
inference/_rules/php/queries/php.reclaim.auth-no-rate-limit.precond.scm
inference/_rules/php/queries/php.reclaim.auth-no-rate-limit.scm
inference/_rules/php/queries/php.reclaim.bac-cookie-authz.scm
inference/_rules/php/queries/php.reclaim.bac-cookie-authz.sink.scm
inference/_rules/php/queries/php.reclaim.bac-cookie-authz.source.scm
inference/_rules/php/queries/php.reclaim.code-injection-taint.sanitizer.scm
inference/_rules/php/queries/php.reclaim.code-injection-taint.scm
inference/_rules/php/queries/php.reclaim.code-injection-taint.sink.scm
inference/_rules/php/queries/php.reclaim.code-injection-taint.source.scm
inference/_rules/php/queries/php.reclaim.command-injection-taint.sanitizer.scm
inference/_rules/php/queries/php.reclaim.command-injection-taint.scm
inference/_rules/php/queries/php.reclaim.command-injection-taint.sink.scm
inference/_rules/php/queries/php.reclaim.command-injection-taint.source.scm
inference/_rules/php/queries/php.reclaim.csrf-get-password.precond.scm
inference/_rules/php/queries/php.reclaim.csrf-get-password.scm
inference/_rules/php/queries/php.reclaim.deserialization-taint.scm
inference/_rules/php/queries/php.reclaim.deserialization-taint.sink.scm
inference/_rules/php/queries/php.reclaim.deserialization-taint.source.scm
inference/_rules/php/queries/php.reclaim.file-upload-path.sanitizer.scm
inference/_rules/php/queries/php.reclaim.file-upload-path.scm
inference/_rules/php/queries/php.reclaim.file-upload-path.sink.scm
inference/_rules/php/queries/php.reclaim.file-upload-path.source.scm
inference/_rules/php/queries/php.reclaim.file-var-from-user-input.precond.scm
inference/_rules/php/queries/php.reclaim.file-var-from-user-input.scm
inference/_rules/php/queries/php.reclaim.hardcoded-key.scm
inference/_rules/php/queries/php.reclaim.hardcoded-key.sink.scm
inference/_rules/php/queries/php.reclaim.hardcoded-key.source.scm
inference/_rules/php/queries/php.reclaim.idor-eloquent-find.guard.scm
inference/_rules/php/queries/php.reclaim.idor-eloquent-find.scm
inference/_rules/php/queries/php.reclaim.idor-eloquent-find.scope.scm
inference/_rules/php/queries/php.reclaim.idor-horizontal-escalation.guard.scm
inference/_rules/php/queries/php.reclaim.idor-horizontal-escalation.scm
inference/_rules/php/queries/php.reclaim.idor-horizontal-escalation.scope.scm
inference/_rules/php/queries/php.reclaim.missing-auth-laravel-route.guard.scm
inference/_rules/php/queries/php.reclaim.missing-auth-laravel-route.scm
inference/_rules/php/queries/php.reclaim.missing-auth-laravel-route.scope.scm
inference/_rules/php/queries/php.reclaim.nydfs-mfa-laravel-auth-no-mfa.guard.scm
inference/_rules/php/queries/php.reclaim.nydfs-mfa-laravel-auth-no-mfa.scm
inference/_rules/php/queries/php.reclaim.nydfs-mfa-laravel-auth-no-mfa.scope.scm
inference/_rules/php/queries/php.reclaim.nydfs-mfa-password-verify-no-mfa.guard.scm
inference/_rules/php/queries/php.reclaim.nydfs-mfa-password-verify-no-mfa.scm
inference/_rules/php/queries/php.reclaim.nydfs-mfa-password-verify-no-mfa.scope.scm
inference/_rules/php/queries/php.reclaim.open-redirect-taint.sanitizer.scm
inference/_rules/php/queries/php.reclaim.open-redirect-taint.scm
inference/_rules/php/queries/php.reclaim.open-redirect-taint.sink.scm
inference/_rules/php/queries/php.reclaim.open-redirect-taint.source.scm
inference/_rules/php/queries/php.reclaim.owasp-agentic-excessive-agency-db-mutation.scm
inference/_rules/php/queries/php.reclaim.owasp-agentic-excessive-agency-db-mutation.sink.scm
inference/_rules/php/queries/php.reclaim.owasp-agentic-excessive-agency-db-mutation.source.scm
inference/_rules/php/queries/php.reclaim.owasp-agentic-excessive-agency-exec.sanitizer.scm
inference/_rules/php/queries/php.reclaim.owasp-agentic-excessive-agency-exec.scm
inference/_rules/php/queries/php.reclaim.owasp-agentic-excessive-agency-exec.sink.scm
inference/_rules/php/queries/php.reclaim.owasp-agentic-excessive-agency-exec.source.scm
inference/_rules/php/queries/php.reclaim.owasp-agentic-excessive-agency-file-write.scm
inference/_rules/php/queries/php.reclaim.owasp-agentic-excessive-agency-file-write.sink.scm
inference/_rules/php/queries/php.reclaim.owasp-agentic-excessive-agency-file-write.source.scm
inference/_rules/php/queries/php.reclaim.owasp-agentic-output-handling-echo.sanitizer.scm
inference/_rules/php/queries/php.reclaim.owasp-agentic-output-handling-echo.scm
inference/_rules/php/queries/php.reclaim.owasp-agentic-output-handling-echo.sink.scm
inference/_rules/php/queries/php.reclaim.owasp-agentic-output-handling-echo.source.scm
inference/_rules/php/queries/php.reclaim.owasp-agentic-output-handling-eval.scm
inference/_rules/php/queries/php.reclaim.owasp-agentic-output-handling-eval.sink.scm
inference/_rules/php/queries/php.reclaim.owasp-agentic-output-handling-eval.source.scm
inference/_rules/php/queries/php.reclaim.owasp-agentic-output-handling-exec.sanitizer.scm
inference/_rules/php/queries/php.reclaim.owasp-agentic-output-handling-exec.scm
inference/_rules/php/queries/php.reclaim.owasp-agentic-output-handling-exec.sink.scm
inference/_rules/php/queries/php.reclaim.owasp-agentic-output-handling-exec.source.scm
inference/_rules/php/queries/php.reclaim.owasp-agentic-prompt-injection-llphant.scm
inference/_rules/php/queries/php.reclaim.owasp-agentic-prompt-injection-llphant.sink.scm
inference/_rules/php/queries/php.reclaim.owasp-agentic-prompt-injection-llphant.source.scm
inference/_rules/php/queries/php.reclaim.owasp-agentic-prompt-injection-openai.scm
inference/_rules/php/queries/php.reclaim.owasp-agentic-prompt-injection-openai.sink.scm
inference/_rules/php/queries/php.reclaim.owasp-agentic-prompt-injection-openai.source.scm
inference/_rules/php/queries/php.reclaim.owasp-agentic-sensitive-info-config.scm
inference/_rules/php/queries/php.reclaim.owasp-agentic-sensitive-info-config.sink.scm
inference/_rules/php/queries/php.reclaim.owasp-agentic-sensitive-info-config.source.scm
inference/_rules/php/queries/php.reclaim.owasp-agentic-sensitive-info-env.scm
inference/_rules/php/queries/php.reclaim.owasp-agentic-sensitive-info-env.sink.scm
inference/_rules/php/queries/php.reclaim.owasp-agentic-sensitive-info-env.source.scm
inference/_rules/php/queries/php.reclaim.path-traversal-taint.sanitizer.scm
inference/_rules/php/queries/php.reclaim.path-traversal-taint.scm
inference/_rules/php/queries/php.reclaim.path-traversal-taint.sink.scm
inference/_rules/php/queries/php.reclaim.path-traversal-taint.source.scm
inference/_rules/php/queries/php.reclaim.sql-injection-taint.sanitizer.scm
inference/_rules/php/queries/php.reclaim.sql-injection-taint.scm
inference/_rules/php/queries/php.reclaim.sql-injection-taint.sink.scm
inference/_rules/php/queries/php.reclaim.sql-injection-taint.source.scm
inference/_rules/php/queries/php.reclaim.sql-query-var-execute.scm
inference/_rules/php/queries/php.reclaim.sql-query-var-execute.sink.scm
inference/_rules/php/queries/php.reclaim.sql-query-var-execute.source.scm
inference/_rules/php/queries/php.reclaim.sql-string-concat-var.scm
inference/_rules/php/queries/php.reclaim.sql-string-concat-var.sink.scm
inference/_rules/php/queries/php.reclaim.sql-string-concat-var.source.scm
inference/_rules/php/queries/php.reclaim.ssrf-taint.sanitizer.scm
inference/_rules/php/queries/php.reclaim.ssrf-taint.scm
inference/_rules/php/queries/php.reclaim.ssrf-taint.sink.scm
inference/_rules/php/queries/php.reclaim.ssrf-taint.source.scm
inference/_rules/php/queries/php.reclaim.weak-hash-md5-session.sanitizer.scm
inference/_rules/php/queries/php.reclaim.weak-hash-md5-session.scm
inference/_rules/php/queries/php.reclaim.weak-hash-md5-session.sink.scm
inference/_rules/php/queries/php.reclaim.weak-hash-md5-session.source.scm
inference/_rules/php/queries/php.reclaim.weak-session-id-sequential.sanitizer.scm
inference/_rules/php/queries/php.reclaim.weak-session-id-sequential.scm
inference/_rules/php/queries/php.reclaim.weak-session-id-sequential.sink.scm
inference/_rules/php/queries/php.reclaim.weak-session-id-sequential.source.scm
inference/_rules/php/queries/php.reclaim.weak-session-id-time.sanitizer.scm
inference/_rules/php/queries/php.reclaim.weak-session-id-time.scm
inference/_rules/php/queries/php.reclaim.weak-session-id-time.sink.scm
inference/_rules/php/queries/php.reclaim.weak-session-id-time.source.scm
inference/_rules/php/queries/php.reclaim.xss-stored-weak-preg-replace.sanitizer.scm
inference/_rules/php/queries/php.reclaim.xss-stored-weak-preg-replace.scm
inference/_rules/php/queries/php.reclaim.xss-stored-weak-preg-replace.sink.scm
inference/_rules/php/queries/php.reclaim.xss-stored-weak-preg-replace.source.scm
inference/_rules/php/queries/php.reclaim.xss-stored-weak-str-replace.sanitizer.scm
inference/_rules/php/queries/php.reclaim.xss-stored-weak-str-replace.scm
inference/_rules/php/queries/php.reclaim.xss-stored-weak-str-replace.sink.scm
inference/_rules/php/queries/php.reclaim.xss-stored-weak-str-replace.source.scm
inference/_rules/php/queries/php.reclaim.xss-taint.sanitizer.scm
inference/_rules/php/queries/php.reclaim.xss-taint.scm
inference/_rules/php/queries/php.reclaim.xss-taint.sink.scm
inference/_rules/php/queries/php.reclaim.xss-taint.source.scm
inference/_rules/php/queries/php.reclaim.xss-weak-sanitize-interpolation.sanitizer.scm
inference/_rules/php/queries/php.reclaim.xss-weak-sanitize-interpolation.scm
inference/_rules/php/queries/php.reclaim.xss-weak-sanitize-interpolation.sink.scm
inference/_rules/php/queries/php.reclaim.xss-weak-sanitize-interpolation.source.scm
inference/_rules/php/queries/php.reclaim.xss-weak-sanitize-post.sanitizer.scm
inference/_rules/php/queries/php.reclaim.xss-weak-sanitize-post.scm
inference/_rules/php/queries/php.reclaim.xss-weak-sanitize-post.sink.scm
inference/_rules/php/queries/php.reclaim.xss-weak-sanitize-post.source.scm
inference/_rules/php/queries/php.reclaim.xxe-taint.scm
inference/_rules/php/queries/php.reclaim.xxe-taint.sink.scm
inference/_rules/php/queries/php.reclaim.xxe-taint.source.scm
inference/_rules/php/queries/php.reclaim.zero-iv.sanitizer.scm
inference/_rules/php/queries/php.reclaim.zero-iv.scm
inference/_rules/php/queries/php.reclaim.zero-iv.sink.scm
inference/_rules/php/queries/php.reclaim.zero-iv.source.scm
inference/_rules/php/queries/php.sqli.mysqli-query-concat-superglobal.scm
inference/_rules/php/queries/php.sqli.pdo-query-interpolation-superglobal.scm
inference/_rules/php/queries/php.ssrf.url-fetch-superglobal.scm
inference/_rules/php/queries/php.weak-crypto.blowfish.scm
inference/_rules/php/queries/php.weak-crypto.mcrypt-des.scm
inference/_rules/php/queries/php.weak-crypto.md5-any.scm
inference/_rules/php/queries/php.weak-crypto.md5-password-arg.scm
inference/_rules/php/queries/php.weak-crypto.openssl-des.scm
inference/_rules/php/queries/php.weak-crypto.openssl-ecb.scm
inference/_rules/php/queries/php.weak-crypto.openssl-rc4.scm
inference/_rules/php/queries/php.weak-crypto.sha1-any.scm
inference/_rules/php/queries/php.xss.echo-concat-superglobal.scm
inference/_rules/php/queries/php.xss.echo-interpolation-superglobal.scm
inference/_rules/php/queries/php.xss.echo-superglobal.scm
inference/_rules/php/queries/php.xss.weak-stripos-script-filter.scm
inference/_rules/php/queries/php.xxe.domdocument-loadxml.scm
inference/_rules/php/queries/php.xxe.simplexml-load-string.scm
inference/_rules/python/metadata/python.cmd-injection.os-exec.json
inference/_rules/python/metadata/python.cmd-injection.os-popen.json
inference/_rules/python/metadata/python.cmd-injection.os-system.json
inference/_rules/python/metadata/python.cmd-injection.subprocess-shell-true.json
inference/_rules/python/metadata/python.code-injection.compile.json
inference/_rules/python/metadata/python.code-injection.dunder-import.json
inference/_rules/python/metadata/python.code-injection.eval.json
inference/_rules/python/metadata/python.code-injection.exec.json
inference/_rules/python/metadata/python.code-injection.import-module.json
inference/_rules/python/metadata/python.cra.data-minimisation-proxy.json
inference/_rules/python/metadata/python.cra.network-impact-resilience.json
inference/_rules/python/metadata/python.cra.secure-default-config.json
inference/_rules/python/metadata/python.cra.secure-update-channel.json
inference/_rules/python/metadata/python.cra.security-logging-absence.json
inference/_rules/python/metadata/python.csrf.django-csrf-exempt.json
inference/_rules/python/metadata/python.csrf.flask-wtf-disabled.json
inference/_rules/python/metadata/python.deserialization.pickle-loads.json
inference/_rules/python/metadata/python.hardcoded-secret.dict-literal.json
inference/_rules/python/metadata/python.hardcoded-secret.named-var.json
inference/_rules/python/metadata/python.hardcoded-secret.pem-private-key.json
inference/_rules/python/metadata/python.hardcoded-secret.stripe-key.json
inference/_rules/python/metadata/python.idor.django-orm-request-key.json
inference/_rules/python/metadata/python.open-redirect.direct.json
inference/_rules/python/metadata/python.owasp-agentic.asi03-excessive-privilege.json
inference/_rules/python/metadata/python.owasp-agentic.asi04-untrusted-tool-source.json
inference/_rules/python/metadata/python.owasp-agentic.asi07-insecure-agent-channel.json
inference/_rules/python/metadata/python.owasp-agentic.excessive-agency-tool.json
inference/_rules/python/metadata/python.owasp-agentic.prompt-fstring.json
inference/_rules/python/metadata/python.owasp-agentic.sensitive-info-in-prompt.json
inference/_rules/python/metadata/python.path-traversal.flask-send-file.json
inference/_rules/python/metadata/python.path-traversal.open-concat.json
inference/_rules/python/metadata/python.path-traversal.open-fstring.json
inference/_rules/python/metadata/python.phi.django-plaintext-field.json
inference/_rules/python/metadata/python.phi.sqlalchemy-plaintext-column.json
inference/_rules/python/metadata/python.pii.hardcoded-credit-card.json
inference/_rules/python/metadata/python.pii.hardcoded-ssn.json
inference/_rules/python/metadata/python.reclaim.csrf-middleware-disabled.json
inference/_rules/python/metadata/python.reclaim.idor-request-param-to-db.json
inference/_rules/python/metadata/python.reclaim.missing-auth-flask-route.json
inference/_rules/python/metadata/python.reclaim.nydfs-mfa-django-login-no-mfa.json
inference/_rules/python/metadata/python.reclaim.nydfs-mfa-flask-login-no-mfa.json
inference/_rules/python/metadata/python.reclaim.output-markup-safe.json
inference/_rules/python/metadata/python.reclaim.prompt-injection-anthropic.json
inference/_rules/python/metadata/python.reclaim.prompt-injection-langchain-from.json
inference/_rules/python/metadata/python.reclaim.prompt-injection-langchain-import.json
inference/_rules/python/metadata/python.reclaim.prompt-injection-openai.json
inference/_rules/python/metadata/python.reclaim.ssrf-taint.json
inference/_rules/python/metadata/python.reclaim.xxe-taint.json
inference/_rules/python/metadata/python.sensitive-data-logging.attr-arg.json
inference/_rules/python/metadata/python.sensitive-data-logging.fstring-var.json
inference/_rules/python/metadata/python.sensitive-data-logging.logger-message.json
inference/_rules/python/metadata/python.sensitive-data-logging.print-message.json
inference/_rules/python/metadata/python.sqli.execute-format.json
inference/_rules/python/metadata/python.sqli.execute-fstring.json
inference/_rules/python/metadata/python.sqli.execute-string-concat.json
inference/_rules/python/metadata/python.ssrf.request-to-fetch.json
inference/_rules/python/metadata/python.weak-crypto.cipher-blowfish.json
inference/_rules/python/metadata/python.weak-crypto.cipher-des.json
inference/_rules/python/metadata/python.weak-crypto.cipher-ecb.json
inference/_rules/python/metadata/python.weak-crypto.cipher-rc2.json
inference/_rules/python/metadata/python.weak-crypto.cipher-rc4.json
inference/_rules/python/metadata/python.weak-crypto.hashlib-md5.json
inference/_rules/python/metadata/python.weak-crypto.hashlib-sha1.json
inference/_rules/python/metadata/python.xss.django-mark-safe.json
inference/_rules/python/metadata/python.xxe.lxml-parse-no-parser.json
inference/_rules/python/metadata/python.xxe.lxml-unsafe-parser.json
inference/_rules/python/metadata/smoke.python.dangerous-call.json
inference/_rules/python/queries/python.cmd-injection.os-exec.scm
inference/_rules/python/queries/python.cmd-injection.os-popen.scm
inference/_rules/python/queries/python.cmd-injection.os-system.scm
inference/_rules/python/queries/python.cmd-injection.subprocess-shell-true.scm
inference/_rules/python/queries/python.code-injection.compile.scm
inference/_rules/python/queries/python.code-injection.dunder-import.scm
inference/_rules/python/queries/python.code-injection.eval.scm
inference/_rules/python/queries/python.code-injection.exec.scm
inference/_rules/python/queries/python.code-injection.import-module.scm
inference/_rules/python/queries/python.cra.data-minimisation-proxy.scm
inference/_rules/python/queries/python.cra.network-impact-resilience.scm
inference/_rules/python/queries/python.cra.secure-default-config.scm
inference/_rules/python/queries/python.cra.secure-update-channel.scm
inference/_rules/python/queries/python.cra.security-logging-absence.guard.scm
inference/_rules/python/queries/python.cra.security-logging-absence.scm
inference/_rules/python/queries/python.cra.security-logging-absence.scope.scm
inference/_rules/python/queries/python.csrf.django-csrf-exempt.scm
inference/_rules/python/queries/python.csrf.flask-wtf-disabled.scm
inference/_rules/python/queries/python.deserialization.pickle-loads.scm
inference/_rules/python/queries/python.hardcoded-secret.dict-literal.scm
inference/_rules/python/queries/python.hardcoded-secret.named-var.scm
inference/_rules/python/queries/python.hardcoded-secret.pem-private-key.scm
inference/_rules/python/queries/python.hardcoded-secret.stripe-key.scm
inference/_rules/python/queries/python.idor.django-orm-request-key.scm
inference/_rules/python/queries/python.open-redirect.direct.scm
inference/_rules/python/queries/python.owasp-agentic.asi03-excessive-privilege.scm
inference/_rules/python/queries/python.owasp-agentic.asi04-untrusted-tool-source.scm
inference/_rules/python/queries/python.owasp-agentic.asi07-insecure-agent-channel.scm
inference/_rules/python/queries/python.owasp-agentic.excessive-agency-tool.scm
inference/_rules/python/queries/python.owasp-agentic.prompt-fstring.scm
inference/_rules/python/queries/python.owasp-agentic.sensitive-info-in-prompt.scm
inference/_rules/python/queries/python.path-traversal.flask-send-file.scm
inference/_rules/python/queries/python.path-traversal.open-concat.scm
inference/_rules/python/queries/python.path-traversal.open-fstring.scm
inference/_rules/python/queries/python.phi.django-plaintext-field.scm
inference/_rules/python/queries/python.phi.sqlalchemy-plaintext-column.scm
inference/_rules/python/queries/python.pii.hardcoded-credit-card.scm
inference/_rules/python/queries/python.pii.hardcoded-ssn.scm
inference/_rules/python/queries/python.reclaim.csrf-middleware-disabled.guard.scm
inference/_rules/python/queries/python.reclaim.csrf-middleware-disabled.scm
inference/_rules/python/queries/python.reclaim.csrf-middleware-disabled.scope.scm
inference/_rules/python/queries/python.reclaim.idor-request-param-to-db.scm
inference/_rules/python/queries/python.reclaim.idor-request-param-to-db.sink.scm
inference/_rules/python/queries/python.reclaim.idor-request-param-to-db.source.scm
inference/_rules/python/queries/python.reclaim.missing-auth-flask-route.guard.scm
inference/_rules/python/queries/python.reclaim.missing-auth-flask-route.scm
inference/_rules/python/queries/python.reclaim.missing-auth-flask-route.scope.scm
inference/_rules/python/queries/python.reclaim.nydfs-mfa-django-login-no-mfa.guard.scm
inference/_rules/python/queries/python.reclaim.nydfs-mfa-django-login-no-mfa.scm
inference/_rules/python/queries/python.reclaim.nydfs-mfa-django-login-no-mfa.scope.scm
inference/_rules/python/queries/python.reclaim.nydfs-mfa-flask-login-no-mfa.guard.scm
inference/_rules/python/queries/python.reclaim.nydfs-mfa-flask-login-no-mfa.scm
inference/_rules/python/queries/python.reclaim.nydfs-mfa-flask-login-no-mfa.scope.scm
inference/_rules/python/queries/python.reclaim.output-markup-safe.sanitizer.scm
inference/_rules/python/queries/python.reclaim.output-markup-safe.scm
inference/_rules/python/queries/python.reclaim.output-markup-safe.sink.scm
inference/_rules/python/queries/python.reclaim.output-markup-safe.source.scm
inference/_rules/python/queries/python.reclaim.prompt-injection-anthropic.sanitizer.scm
inference/_rules/python/queries/python.reclaim.prompt-injection-anthropic.scm
inference/_rules/python/queries/python.reclaim.prompt-injection-anthropic.sink.scm
inference/_rules/python/queries/python.reclaim.prompt-injection-anthropic.source.scm
inference/_rules/python/queries/python.reclaim.prompt-injection-langchain-from.precond.scm
inference/_rules/python/queries/python.reclaim.prompt-injection-langchain-from.scm
inference/_rules/python/queries/python.reclaim.prompt-injection-langchain-import.precond.scm
inference/_rules/python/queries/python.reclaim.prompt-injection-langchain-import.scm
inference/_rules/python/queries/python.reclaim.prompt-injection-openai.sanitizer.scm
inference/_rules/python/queries/python.reclaim.prompt-injection-openai.scm
inference/_rules/python/queries/python.reclaim.prompt-injection-openai.sink.scm
inference/_rules/python/queries/python.reclaim.prompt-injection-openai.source.scm
inference/_rules/python/queries/python.reclaim.ssrf-taint.sanitizer.scm
inference/_rules/python/queries/python.reclaim.ssrf-taint.scm
inference/_rules/python/queries/python.reclaim.ssrf-taint.sink.scm
inference/_rules/python/queries/python.reclaim.ssrf-taint.source.scm
inference/_rules/python/queries/python.reclaim.xxe-taint.sanitizer.scm
inference/_rules/python/queries/python.reclaim.xxe-taint.scm
inference/_rules/python/queries/python.reclaim.xxe-taint.sink.scm
inference/_rules/python/queries/python.reclaim.xxe-taint.source.scm
inference/_rules/python/queries/python.sensitive-data-logging.attr-arg.scm
inference/_rules/python/queries/python.sensitive-data-logging.fstring-var.scm
inference/_rules/python/queries/python.sensitive-data-logging.logger-message.scm
inference/_rules/python/queries/python.sensitive-data-logging.print-message.scm
inference/_rules/python/queries/python.sqli.execute-format.scm
inference/_rules/python/queries/python.sqli.execute-fstring.scm
inference/_rules/python/queries/python.sqli.execute-string-concat.scm
inference/_rules/python/queries/python.ssrf.request-to-fetch.scm
inference/_rules/python/queries/python.weak-crypto.cipher-blowfish.scm
inference/_rules/python/queries/python.weak-crypto.cipher-des.scm
inference/_rules/python/queries/python.weak-crypto.cipher-ecb.scm
inference/_rules/python/queries/python.weak-crypto.cipher-rc2.scm
inference/_rules/python/queries/python.weak-crypto.cipher-rc4.scm
inference/_rules/python/queries/python.weak-crypto.hashlib-md5.scm
inference/_rules/python/queries/python.weak-crypto.hashlib-sha1.scm
inference/_rules/python/queries/python.xss.django-mark-safe.scm
inference/_rules/python/queries/python.xxe.lxml-parse-no-parser.scm
inference/_rules/python/queries/python.xxe.lxml-unsafe-parser.scm
inference/_rules/python/queries/smoke.python.dangerous-call.scm
inference/_rules/ruby/metadata/ruby.access-control.idor-find-by-params.json
inference/_rules/ruby/metadata/ruby.access-control.idor-horizontal-escalation.json
inference/_rules/ruby/metadata/ruby.cmd-injection.backtick-interpolation.json
inference/_rules/ruby/metadata/ruby.cmd-injection.kernel-open-input.json
inference/_rules/ruby/metadata/ruby.cmd-injection.popen-interpolation.json
inference/_rules/ruby/metadata/ruby.cmd-injection.system-concat.json
inference/_rules/ruby/metadata/ruby.code-injection.constantize-input.json
inference/_rules/ruby/metadata/ruby.code-injection.eval-interpolation.json
inference/_rules/ruby/metadata/ruby.code-injection.instance-eval-block.json
inference/_rules/ruby/metadata/ruby.code-injection.send-user-method.json
inference/_rules/ruby/metadata/ruby.cra.network-impact-resilience.json
inference/_rules/ruby/metadata/ruby.cra.secure-update-channel.json
inference/_rules/ruby/metadata/ruby.csrf.skip-verification.json
inference/_rules/ruby/metadata/ruby.deserialization.json-load.json
inference/_rules/ruby/metadata/ruby.deserialization.marshal-load.json
inference/_rules/ruby/metadata/ruby.deserialization.yaml-load.json
inference/_rules/ruby/metadata/ruby.nydfs-mfa.bcrypt-no-mfa.json
inference/_rules/ruby/metadata/ruby.nydfs-mfa.devise-no-mfa.json
inference/_rules/ruby/metadata/ruby.open-redirect.redirect-to-input.json
inference/_rules/ruby/metadata/ruby.owasp-agentic.excessive-agency.db-mutation.langchain.json
inference/_rules/ruby/metadata/ruby.owasp-agentic.excessive-agency.db-mutation.openai.json
inference/_rules/ruby/metadata/ruby.owasp-agentic.excessive-agency.exec.langchain.json
inference/_rules/ruby/metadata/ruby.owasp-agentic.excessive-agency.exec.openai.json
inference/_rules/ruby/metadata/ruby.owasp-agentic.excessive-agency.file-write.langchain.json
inference/_rules/ruby/metadata/ruby.owasp-agentic.excessive-agency.file-write.openai.json
inference/_rules/ruby/metadata/ruby.owasp-agentic.output-handling.exec.langchain.json
inference/_rules/ruby/metadata/ruby.owasp-agentic.output-handling.exec.openai.json
inference/_rules/ruby/metadata/ruby.owasp-agentic.output-handling.html-safe.langchain.json
inference/_rules/ruby/metadata/ruby.owasp-agentic.output-handling.html-safe.openai.json
inference/_rules/ruby/metadata/ruby.owasp-agentic.output-handling.sql.openai.json
inference/_rules/ruby/metadata/ruby.owasp-agentic.prompt-injection.interpolation.json
inference/_rules/ruby/metadata/ruby.owasp-agentic.prompt-injection.langchainrb.json
inference/_rules/ruby/metadata/ruby.owasp-agentic.prompt-injection.openai.json
inference/_rules/ruby/metadata/ruby.owasp-agentic.sensitive-info.credentials.json
inference/_rules/ruby/metadata/ruby.owasp-agentic.sensitive-info.env.json
inference/_rules/ruby/metadata/ruby.path-traversal.file-from-input.json
inference/_rules/ruby/metadata/ruby.path-traversal.file-interpolation.json
inference/_rules/ruby/metadata/ruby.phi.activerecord-migration-string.json
inference/_rules/ruby/metadata/ruby.phi.activerecord-migration-text.json
inference/_rules/ruby/metadata/ruby.phi.activerecord-model-attribute.json
inference/_rules/ruby/metadata/ruby.secrets.hardcoded-apikey.json
inference/_rules/ruby/metadata/ruby.secrets.hardcoded-aws.json
inference/_rules/ruby/metadata/ruby.secrets.hardcoded-env-assignment.json
inference/_rules/ruby/metadata/ruby.secrets.hardcoded-password.json
inference/_rules/ruby/metadata/ruby.secrets.hardcoded-private-key.json
inference/_rules/ruby/metadata/ruby.secrets.hardcoded-token.json
inference/_rules/ruby/metadata/ruby.sensitive-data-logging.rails-logger-identifier.json
inference/_rules/ruby/metadata/ruby.sensitive-data-logging.stdout-identifier.json
inference/_rules/ruby/metadata/ruby.sqli.where-interpolation.json
inference/_rules/ruby/metadata/ruby.ssrf.httparty-from-input.json
inference/_rules/ruby/metadata/ruby.ssrf.open-uri-from-params.json
inference/_rules/ruby/metadata/ruby.weak-crypto.des-cipher.json
inference/_rules/ruby/metadata/ruby.weak-crypto.ecb-mode.json
inference/_rules/ruby/metadata/ruby.weak-crypto.hardcoded-key.json
inference/_rules/ruby/metadata/ruby.weak-crypto.md5.json
inference/_rules/ruby/metadata/ruby.weak-crypto.rc2.json
inference/_rules/ruby/metadata/ruby.weak-crypto.sha1.json
inference/_rules/ruby/metadata/ruby.weak-crypto.weak-pbkdf2-rounds.json
inference/_rules/ruby/metadata/ruby.weak-crypto.zero-iv.json
inference/_rules/ruby/metadata/ruby.xss.html-safe-on-interpolated.json
inference/_rules/ruby/metadata/ruby.xxe.rexml-document.json
inference/_rules/ruby/metadata/smoke.ruby.dangerous-call.json
inference/_rules/ruby/queries/ruby.access-control.idor-find-by-params.guard.scm
inference/_rules/ruby/queries/ruby.access-control.idor-find-by-params.scm
inference/_rules/ruby/queries/ruby.access-control.idor-find-by-params.scope.scm
inference/_rules/ruby/queries/ruby.access-control.idor-horizontal-escalation.guard.scm
inference/_rules/ruby/queries/ruby.access-control.idor-horizontal-escalation.scm
inference/_rules/ruby/queries/ruby.access-control.idor-horizontal-escalation.scope.scm
inference/_rules/ruby/queries/ruby.cmd-injection.backtick-interpolation.scm
inference/_rules/ruby/queries/ruby.cmd-injection.kernel-open-input.scm
inference/_rules/ruby/queries/ruby.cmd-injection.popen-interpolation.scm
inference/_rules/ruby/queries/ruby.cmd-injection.system-concat.scm
inference/_rules/ruby/queries/ruby.code-injection.constantize-input.scm
inference/_rules/ruby/queries/ruby.code-injection.eval-interpolation.scm
inference/_rules/ruby/queries/ruby.code-injection.instance-eval-block.scm
inference/_rules/ruby/queries/ruby.code-injection.send-user-method.scm
inference/_rules/ruby/queries/ruby.cra.network-impact-resilience.scm
inference/_rules/ruby/queries/ruby.cra.secure-update-channel.scm
inference/_rules/ruby/queries/ruby.csrf.skip-verification.scm
inference/_rules/ruby/queries/ruby.deserialization.json-load.scm
inference/_rules/ruby/queries/ruby.deserialization.marshal-load.scm
inference/_rules/ruby/queries/ruby.deserialization.yaml-load.scm
inference/_rules/ruby/queries/ruby.nydfs-mfa.bcrypt-no-mfa.guard.scm
inference/_rules/ruby/queries/ruby.nydfs-mfa.bcrypt-no-mfa.scm
inference/_rules/ruby/queries/ruby.nydfs-mfa.bcrypt-no-mfa.scope.scm
inference/_rules/ruby/queries/ruby.nydfs-mfa.devise-no-mfa.guard.scm
inference/_rules/ruby/queries/ruby.nydfs-mfa.devise-no-mfa.scm
inference/_rules/ruby/queries/ruby.nydfs-mfa.devise-no-mfa.scope.scm
inference/_rules/ruby/queries/ruby.open-redirect.redirect-to-input.scm
inference/_rules/ruby/queries/ruby.owasp-agentic.excessive-agency.db-mutation.langchain.precond.scm
inference/_rules/ruby/queries/ruby.owasp-agentic.excessive-agency.db-mutation.langchain.scm
inference/_rules/ruby/queries/ruby.owasp-agentic.excessive-agency.db-mutation.openai.precond.scm
inference/_rules/ruby/queries/ruby.owasp-agentic.excessive-agency.db-mutation.openai.scm
inference/_rules/ruby/queries/ruby.owasp-agentic.excessive-agency.exec.langchain.precond.scm
inference/_rules/ruby/queries/ruby.owasp-agentic.excessive-agency.exec.langchain.scm
inference/_rules/ruby/queries/ruby.owasp-agentic.excessive-agency.exec.openai.precond.scm
inference/_rules/ruby/queries/ruby.owasp-agentic.excessive-agency.exec.openai.scm
inference/_rules/ruby/queries/ruby.owasp-agentic.excessive-agency.file-write.langchain.precond.scm
inference/_rules/ruby/queries/ruby.owasp-agentic.excessive-agency.file-write.langchain.scm
inference/_rules/ruby/queries/ruby.owasp-agentic.excessive-agency.file-write.openai.precond.scm
inference/_rules/ruby/queries/ruby.owasp-agentic.excessive-agency.file-write.openai.scm
inference/_rules/ruby/queries/ruby.owasp-agentic.output-handling.exec.langchain.precond.scm
inference/_rules/ruby/queries/ruby.owasp-agentic.output-handling.exec.langchain.scm
inference/_rules/ruby/queries/ruby.owasp-agentic.output-handling.exec.openai.precond.scm
inference/_rules/ruby/queries/ruby.owasp-agentic.output-handling.exec.openai.scm
inference/_rules/ruby/queries/ruby.owasp-agentic.output-handling.html-safe.langchain.precond.scm
inference/_rules/ruby/queries/ruby.owasp-agentic.output-handling.html-safe.langchain.scm
inference/_rules/ruby/queries/ruby.owasp-agentic.output-handling.html-safe.openai.precond.scm
inference/_rules/ruby/queries/ruby.owasp-agentic.output-handling.html-safe.openai.scm
inference/_rules/ruby/queries/ruby.owasp-agentic.output-handling.sql.openai.precond.scm
inference/_rules/ruby/queries/ruby.owasp-agentic.output-handling.sql.openai.scm
inference/_rules/ruby/queries/ruby.owasp-agentic.prompt-injection.interpolation.sanitizer.scm
inference/_rules/ruby/queries/ruby.owasp-agentic.prompt-injection.interpolation.scm
inference/_rules/ruby/queries/ruby.owasp-agentic.prompt-injection.interpolation.sink.scm
inference/_rules/ruby/queries/ruby.owasp-agentic.prompt-injection.interpolation.source.scm
inference/_rules/ruby/queries/ruby.owasp-agentic.prompt-injection.langchainrb.sanitizer.scm
inference/_rules/ruby/queries/ruby.owasp-agentic.prompt-injection.langchainrb.scm
inference/_rules/ruby/queries/ruby.owasp-agentic.prompt-injection.langchainrb.sink.scm
inference/_rules/ruby/queries/ruby.owasp-agentic.prompt-injection.langchainrb.source.scm
inference/_rules/ruby/queries/ruby.owasp-agentic.prompt-injection.openai.sanitizer.scm
inference/_rules/ruby/queries/ruby.owasp-agentic.prompt-injection.openai.scm
inference/_rules/ruby/queries/ruby.owasp-agentic.prompt-injection.openai.sink.scm
inference/_rules/ruby/queries/ruby.owasp-agentic.prompt-injection.openai.source.scm
inference/_rules/ruby/queries/ruby.owasp-agentic.sensitive-info.credentials.sanitizer.scm
inference/_rules/ruby/queries/ruby.owasp-agentic.sensitive-info.credentials.scm
inference/_rules/ruby/queries/ruby.owasp-agentic.sensitive-info.credentials.sink.scm
inference/_rules/ruby/queries/ruby.owasp-agentic.sensitive-info.credentials.source.scm
inference/_rules/ruby/queries/ruby.owasp-agentic.sensitive-info.env.sanitizer.scm
inference/_rules/ruby/queries/ruby.owasp-agentic.sensitive-info.env.scm
inference/_rules/ruby/queries/ruby.owasp-agentic.sensitive-info.env.sink.scm
inference/_rules/ruby/queries/ruby.owasp-agentic.sensitive-info.env.source.scm
inference/_rules/ruby/queries/ruby.path-traversal.file-from-input.scm
inference/_rules/ruby/queries/ruby.path-traversal.file-interpolation.scm
inference/_rules/ruby/queries/ruby.phi.activerecord-migration-string.scm
inference/_rules/ruby/queries/ruby.phi.activerecord-migration-text.scm
inference/_rules/ruby/queries/ruby.phi.activerecord-model-attribute.scm
inference/_rules/ruby/queries/ruby.secrets.hardcoded-apikey.scm
inference/_rules/ruby/queries/ruby.secrets.hardcoded-aws.scm
inference/_rules/ruby/queries/ruby.secrets.hardcoded-env-assignment.scm
inference/_rules/ruby/queries/ruby.secrets.hardcoded-password.scm
inference/_rules/ruby/queries/ruby.secrets.hardcoded-private-key.scm
inference/_rules/ruby/queries/ruby.secrets.hardcoded-token.scm
inference/_rules/ruby/queries/ruby.sensitive-data-logging.rails-logger-identifier.scm
inference/_rules/ruby/queries/ruby.sensitive-data-logging.stdout-identifier.scm
inference/_rules/ruby/queries/ruby.sqli.where-interpolation.scm
inference/_rules/ruby/queries/ruby.ssrf.httparty-from-input.scm
inference/_rules/ruby/queries/ruby.ssrf.open-uri-from-params.scm
inference/_rules/ruby/queries/ruby.weak-crypto.des-cipher.scm
inference/_rules/ruby/queries/ruby.weak-crypto.ecb-mode.scm
inference/_rules/ruby/queries/ruby.weak-crypto.hardcoded-key.scm
inference/_rules/ruby/queries/ruby.weak-crypto.hardcoded-key.sink.scm
inference/_rules/ruby/queries/ruby.weak-crypto.hardcoded-key.source.scm
inference/_rules/ruby/queries/ruby.weak-crypto.md5.scm
inference/_rules/ruby/queries/ruby.weak-crypto.rc2.scm
inference/_rules/ruby/queries/ruby.weak-crypto.sha1.scm
inference/_rules/ruby/queries/ruby.weak-crypto.weak-pbkdf2-rounds.scm
inference/_rules/ruby/queries/ruby.weak-crypto.zero-iv.sanitizer.scm
inference/_rules/ruby/queries/ruby.weak-crypto.zero-iv.scm
inference/_rules/ruby/queries/ruby.weak-crypto.zero-iv.sink.scm
inference/_rules/ruby/queries/ruby.weak-crypto.zero-iv.source.scm
inference/_rules/ruby/queries/ruby.xss.html-safe-on-interpolated.scm
inference/_rules/ruby/queries/ruby.xxe.rexml-document.scm
inference/_rules/ruby/queries/smoke.ruby.dangerous-call.scm
inference/_rules/rust/metadata/rust.cmd-injection.command-new.json
inference/_rules/rust/metadata/rust.cmd-injection.shell-c-passthrough.json
inference/_rules/rust/metadata/rust.code-injection.libloading-new.json
inference/_rules/rust/metadata/rust.code-injection.scripting-engine.json
inference/_rules/rust/metadata/rust.cra.network-impact-resilience.json
inference/_rules/rust/metadata/rust.cra.secure-update-channel.json
inference/_rules/rust/metadata/rust.csrf.samesite-none.json
inference/_rules/rust/metadata/rust.deserialization.serde-from-non-literal.json
inference/_rules/rust/metadata/rust.deserialization.serde-untagged.json
inference/_rules/rust/metadata/rust.hardcoded-secret.api-key.json
inference/_rules/rust/metadata/rust.hardcoded-secret.aws.json
inference/_rules/rust/metadata/rust.hardcoded-secret.const-decl.json
inference/_rules/rust/metadata/rust.hardcoded-secret.password.json
inference/_rules/rust/metadata/rust.hardcoded-secret.private-key.json
inference/_rules/rust/metadata/rust.hardcoded-secret.token.json
inference/_rules/rust/metadata/rust.open-redirect.actix.json
inference/_rules/rust/metadata/rust.open-redirect.axum.json
inference/_rules/rust/metadata/rust.owasp-agentic.output-html-raw.json
inference/_rules/rust/metadata/rust.owasp-agentic.pii-ssn-literal.json
inference/_rules/rust/metadata/rust.owasp-agentic.prompt-format.json
inference/_rules/rust/metadata/rust.owasp-agentic.secret-in-prompt.json
inference/_rules/rust/metadata/rust.owasp-agentic.ssn-in-prompt.json
inference/_rules/rust/metadata/rust.path-traversal.fs-non-literal.json
inference/_rules/rust/metadata/rust.phi.diesel-sensitive-column.json
inference/_rules/rust/metadata/rust.phi.diesel-struct-string.json
inference/_rules/rust/metadata/rust.reclaim.excessive-agency-destructive-sql-async-openai.json
inference/_rules/rust/metadata/rust.reclaim.excessive-agency-destructive-sql-rig.json
inference/_rules/rust/metadata/rust.reclaim.excessive-agency-file-delete-async-openai.json
inference/_rules/rust/metadata/rust.reclaim.excessive-agency-file-delete-rig.json
inference/_rules/rust/metadata/rust.reclaim.excessive-agency-shell-tool-async-openai.json
inference/_rules/rust/metadata/rust.reclaim.excessive-agency-shell-tool-rig.json
inference/_rules/rust/metadata/rust.reclaim.hardcoded-key.json
inference/_rules/rust/metadata/rust.reclaim.nydfs-mfa-argon2-no-mfa.json
inference/_rules/rust/metadata/rust.reclaim.nydfs-mfa-bcrypt-no-mfa.json
inference/_rules/rust/metadata/rust.reclaim.nydfs-mfa-password-hash-no-mfa.json
inference/_rules/rust/metadata/rust.reclaim.prompt-injection-async-openai.json
inference/_rules/rust/metadata/rust.reclaim.prompt-injection-rig.json
inference/_rules/rust/metadata/rust.reclaim.zero-iv.json
inference/_rules/rust/metadata/rust.sensitive-data-logging.dbg.json
inference/_rules/rust/metadata/rust.sensitive-data-logging.log-macro.json
inference/_rules/rust/metadata/rust.sensitive-data-logging.println.json
inference/_rules/rust/metadata/rust.sqli.concat-build.json
inference/_rules/rust/metadata/rust.sqli.format-build.json
inference/_rules/rust/metadata/rust.sqli.format-macro.json
inference/_rules/rust/metadata/rust.sqli.query-bang-format.json
inference/_rules/rust/metadata/rust.ssrf.reqwest-client-method.json
inference/_rules/rust/metadata/rust.ssrf.reqwest-non-literal.json
inference/_rules/rust/metadata/rust.unsafe.as-ref-raw.json
inference/_rules/rust/metadata/rust.unsafe.function-call.json
inference/_rules/rust/metadata/rust.unsafe.mutable-static.json
inference/_rules/rust/metadata/rust.unsafe.raw-pointer-deref.json
inference/_rules/rust/metadata/rust.unsafe.transmute.json
inference/_rules/rust/metadata/rust.unwrap.parse-unwrap.json
inference/_rules/rust/metadata/rust.weak-crypto.blowfish.json
inference/_rules/rust/metadata/rust.weak-crypto.des.json
inference/_rules/rust/metadata/rust.weak-crypto.ecb-mode.json
inference/_rules/rust/metadata/rust.weak-crypto.md5.json
inference/_rules/rust/metadata/rust.weak-crypto.pbkdf2-low-rounds.json
inference/_rules/rust/metadata/rust.weak-crypto.rc2.json
inference/_rules/rust/metadata/rust.weak-crypto.rc4.json
inference/_rules/rust/metadata/rust.weak-crypto.sha1.json
inference/_rules/rust/metadata/rust.xss.format-html.json
inference/_rules/rust/metadata/rust.xss.raw-html-ctor.json
inference/_rules/rust/metadata/rust.xss.string-concat.json
inference/_rules/rust/metadata/rust.xxe.libxml-parser.json
inference/_rules/rust/metadata/rust.xxe.xml-reader-advisory.json
inference/_rules/rust/metadata/smoke.rust.dangerous-call.json
inference/_rules/rust/queries/rust.cmd-injection.command-new.scm
inference/_rules/rust/queries/rust.cmd-injection.shell-c-passthrough.scm
inference/_rules/rust/queries/rust.code-injection.libloading-new.scm
inference/_rules/rust/queries/rust.code-injection.scripting-engine.scm
inference/_rules/rust/queries/rust.cra.network-impact-resilience.scm
inference/_rules/rust/queries/rust.cra.secure-update-channel.scm
inference/_rules/rust/queries/rust.csrf.samesite-none.scm
inference/_rules/rust/queries/rust.deserialization.serde-from-non-literal.scm
inference/_rules/rust/queries/rust.deserialization.serde-untagged.scm
inference/_rules/rust/queries/rust.hardcoded-secret.api-key.scm
inference/_rules/rust/queries/rust.hardcoded-secret.aws.scm
inference/_rules/rust/queries/rust.hardcoded-secret.const-decl.scm
inference/_rules/rust/queries/rust.hardcoded-secret.password.scm
inference/_rules/rust/queries/rust.hardcoded-secret.private-key.scm
inference/_rules/rust/queries/rust.hardcoded-secret.token.scm
inference/_rules/rust/queries/rust.open-redirect.actix.scm
inference/_rules/rust/queries/rust.open-redirect.axum.scm
inference/_rules/rust/queries/rust.owasp-agentic.output-html-raw.scm
inference/_rules/rust/queries/rust.owasp-agentic.pii-ssn-literal.scm
inference/_rules/rust/queries/rust.owasp-agentic.prompt-format.scm
inference/_rules/rust/queries/rust.owasp-agentic.secret-in-prompt.scm
inference/_rules/rust/queries/rust.owasp-agentic.ssn-in-prompt.scm
inference/_rules/rust/queries/rust.path-traversal.fs-non-literal.scm
inference/_rules/rust/queries/rust.phi.diesel-sensitive-column.scm
inference/_rules/rust/queries/rust.phi.diesel-struct-string.scm
inference/_rules/rust/queries/rust.reclaim.excessive-agency-destructive-sql-async-openai.precond.scm
inference/_rules/rust/queries/rust.reclaim.excessive-agency-destructive-sql-async-openai.scm
inference/_rules/rust/queries/rust.reclaim.excessive-agency-destructive-sql-rig.precond.scm
inference/_rules/rust/queries/rust.reclaim.excessive-agency-destructive-sql-rig.scm
inference/_rules/rust/queries/rust.reclaim.excessive-agency-file-delete-async-openai.precond.scm
inference/_rules/rust/queries/rust.reclaim.excessive-agency-file-delete-async-openai.scm
inference/_rules/rust/queries/rust.reclaim.excessive-agency-file-delete-rig.precond.scm
inference/_rules/rust/queries/rust.reclaim.excessive-agency-file-delete-rig.scm
inference/_rules/rust/queries/rust.reclaim.excessive-agency-shell-tool-async-openai.precond.scm
inference/_rules/rust/queries/rust.reclaim.excessive-agency-shell-tool-async-openai.scm
inference/_rules/rust/queries/rust.reclaim.excessive-agency-shell-tool-rig.precond.scm
inference/_rules/rust/queries/rust.reclaim.excessive-agency-shell-tool-rig.scm
inference/_rules/rust/queries/rust.reclaim.hardcoded-key.scm
inference/_rules/rust/queries/rust.reclaim.hardcoded-key.sink.scm
inference/_rules/rust/queries/rust.reclaim.hardcoded-key.source.scm
inference/_rules/rust/queries/rust.reclaim.nydfs-mfa-argon2-no-mfa.guard.scm
inference/_rules/rust/queries/rust.reclaim.nydfs-mfa-argon2-no-mfa.scm
inference/_rules/rust/queries/rust.reclaim.nydfs-mfa-argon2-no-mfa.scope.scm
inference/_rules/rust/queries/rust.reclaim.nydfs-mfa-bcrypt-no-mfa.guard.scm
inference/_rules/rust/queries/rust.reclaim.nydfs-mfa-bcrypt-no-mfa.scm
inference/_rules/rust/queries/rust.reclaim.nydfs-mfa-bcrypt-no-mfa.scope.scm
inference/_rules/rust/queries/rust.reclaim.nydfs-mfa-password-hash-no-mfa.guard.scm
inference/_rules/rust/queries/rust.reclaim.nydfs-mfa-password-hash-no-mfa.scm
inference/_rules/rust/queries/rust.reclaim.nydfs-mfa-password-hash-no-mfa.scope.scm
inference/_rules/rust/queries/rust.reclaim.prompt-injection-async-openai.sanitizer.scm
inference/_rules/rust/queries/rust.reclaim.prompt-injection-async-openai.scm
inference/_rules/rust/queries/rust.reclaim.prompt-injection-async-openai.sink.scm
inference/_rules/rust/queries/rust.reclaim.prompt-injection-async-openai.source.scm
inference/_rules/rust/queries/rust.reclaim.prompt-injection-rig.sanitizer.scm
inference/_rules/rust/queries/rust.reclaim.prompt-injection-rig.scm
inference/_rules/rust/queries/rust.reclaim.prompt-injection-rig.sink.scm
inference/_rules/rust/queries/rust.reclaim.prompt-injection-rig.source.scm
inference/_rules/rust/queries/rust.reclaim.zero-iv.scm
inference/_rules/rust/queries/rust.reclaim.zero-iv.sink.scm
inference/_rules/rust/queries/rust.reclaim.zero-iv.source.scm
inference/_rules/rust/queries/rust.sensitive-data-logging.dbg.scm
inference/_rules/rust/queries/rust.sensitive-data-logging.log-macro.scm
inference/_rules/rust/queries/rust.sensitive-data-logging.println.scm
inference/_rules/rust/queries/rust.sqli.concat-build.scm
inference/_rules/rust/queries/rust.sqli.format-build.scm
inference/_rules/rust/queries/rust.sqli.format-macro.scm
inference/_rules/rust/queries/rust.sqli.query-bang-format.scm
inference/_rules/rust/queries/rust.ssrf.reqwest-client-method.scm
inference/_rules/rust/queries/rust.ssrf.reqwest-non-literal.scm
inference/_rules/rust/queries/rust.unsafe.as-ref-raw.scm
inference/_rules/rust/queries/rust.unsafe.function-call.scm
inference/_rules/rust/queries/rust.unsafe.mutable-static.scm
inference/_rules/rust/queries/rust.unsafe.raw-pointer-deref.scm
inference/_rules/rust/queries/rust.unsafe.transmute.scm
inference/_rules/rust/queries/rust.unwrap.parse-unwrap.scm
inference/_rules/rust/queries/rust.weak-crypto.blowfish.scm
inference/_rules/rust/queries/rust.weak-crypto.des.scm
inference/_rules/rust/queries/rust.weak-crypto.ecb-mode.scm
inference/_rules/rust/queries/rust.weak-crypto.md5.scm
inference/_rules/rust/queries/rust.weak-crypto.pbkdf2-low-rounds.scm
inference/_rules/rust/queries/rust.weak-crypto.rc2.scm
inference/_rules/rust/queries/rust.weak-crypto.rc4.scm
inference/_rules/rust/queries/rust.weak-crypto.sha1.scm
inference/_rules/rust/queries/rust.xss.format-html.scm
inference/_rules/rust/queries/rust.xss.raw-html-ctor.scm
inference/_rules/rust/queries/rust.xss.string-concat.scm
inference/_rules/rust/queries/rust.xxe.libxml-parser.scm
inference/_rules/rust/queries/rust.xxe.xml-reader-advisory.scm
inference/_rules/rust/queries/smoke.rust.dangerous-call.scm
inference/_rules/swift/metadata/smoke.swift.dangerous-call.json
inference/_rules/swift/metadata/swift.cmd-injection.popen.json
inference/_rules/swift/metadata/swift.cmd-injection.shell-exec.json
inference/_rules/swift/metadata/swift.code-injection.dlopen-interpolation.json
inference/_rules/swift/metadata/swift.code-injection.eval-javascript-interpolation.json
inference/_rules/swift/metadata/swift.code-injection.evaluatescript-interpolation.json
inference/_rules/swift/metadata/swift.code-injection.nsexpression-interpolation.json
inference/_rules/swift/metadata/swift.code-injection.nspredicate-interpolation.json
inference/_rules/swift/metadata/swift.csrf.cookie-samesite-none.json
inference/_rules/swift/metadata/swift.csrf.vapor-no-protection.json
inference/_rules/swift/metadata/swift.deserialization.nskeyedunarchiver-legacy.json
inference/_rules/swift/metadata/swift.hardcoded-secret.apikey-assignment.json
inference/_rules/swift/metadata/swift.hardcoded-secret.private-key.json
inference/_rules/swift/metadata/swift.insecure-http.ats-bypass-marker.json
inference/_rules/swift/metadata/swift.insecure-http.http-interpolation.json
inference/_rules/swift/metadata/swift.insecure-http.http-url.json
inference/_rules/swift/metadata/swift.insecure-storage.coredata-add-store-no-protection.json
inference/_rules/swift/metadata/swift.insecure-storage.coredata-password-field.json
inference/_rules/swift/metadata/swift.insecure-storage.coredata-persistent-container.json
inference/_rules/swift/metadata/swift.insecure-storage.keychain-no-accessibility.json
inference/_rules/swift/metadata/swift.insecure-storage.plist-credential-read.json
inference/_rules/swift/metadata/swift.insecure-storage.plist-credentials-copy.json
inference/_rules/swift/metadata/swift.insecure-storage.realm-no-encryption.json
inference/_rules/swift/metadata/swift.insecure-storage.userdefaults-sensitive-key.json
inference/_rules/swift/metadata/swift.insecure-storage.write-sensitive-file.json
inference/_rules/swift/metadata/swift.nydfs-mfa.keychain-retrieval.json
inference/_rules/swift/metadata/swift.nydfs-mfa.password-verify.json
inference/_rules/swift/metadata/swift.nydfs-mfa.vapor-auth-require.json
inference/_rules/swift/metadata/swift.open-redirect.request-query-redirect.json
inference/_rules/swift/metadata/swift.open-redirect.uiapplication-open-request.json
inference/_rules/swift/metadata/swift.owasp-agentic.excessive-agency-destructive-sql-alt.json
inference/_rules/swift/metadata/swift.owasp-agentic.excessive-agency-destructive-sql.json
inference/_rules/swift/metadata/swift.owasp-agentic.excessive-agency-file-delete-alt.json
inference/_rules/swift/metadata/swift.owasp-agentic.excessive-agency-file-delete.json
inference/_rules/swift/metadata/swift.owasp-agentic.excessive-agency-shell-tool-alt.json
inference/_rules/swift/metadata/swift.owasp-agentic.excessive-agency-shell-tool.json
inference/_rules/swift/metadata/swift.owasp-agentic.output-process.json
inference/_rules/swift/metadata/swift.owasp-agentic.output-sql-interpolation.json
inference/_rules/swift/metadata/swift.owasp-agentic.output-webview-rawvar.json
inference/_rules/swift/metadata/swift.owasp-agentic.pii-ssn-literal-in-prompt.json
inference/_rules/swift/metadata/swift.owasp-agentic.prompt-content-interpolation.json
inference/_rules/swift/metadata/swift.owasp-agentic.prompt-injection-macpaw-openai.json
inference/_rules/swift/metadata/swift.owasp-agentic.prompt-injection-swift-openai.json
inference/_rules/swift/metadata/swift.owasp-agentic.secret-in-prompt.json
inference/_rules/swift/metadata/swift.owasp-agentic.ssn-in-prompt.json
inference/_rules/swift/metadata/swift.path-traversal.file-url-interpolation.json
inference/_rules/swift/metadata/swift.path-traversal.filehandle-interpolation.json
inference/_rules/swift/metadata/swift.path-traversal.string-contentsoffile-interpolation.json
inference/_rules/swift/metadata/swift.phi-coredata.cc-plaintext.json
inference/_rules/swift/metadata/swift.phi-coredata.dob-plaintext.json
inference/_rules/swift/metadata/swift.phi-coredata.medical-plaintext.json
inference/_rules/swift/metadata/swift.phi-coredata.ssn-plaintext.json
inference/_rules/swift/metadata/swift.sensitive-logging.nslog.json
inference/_rules/swift/metadata/swift.sensitive-logging.oslog.json
inference/_rules/swift/metadata/swift.sensitive-logging.print.json
inference/_rules/swift/metadata/swift.sqli.execute-interpolation.json
inference/_rules/swift/metadata/swift.sqli.grdb-sql-interpolation.json
inference/_rules/swift/metadata/swift.sqli.sqlite3-exec.json
inference/_rules/swift/metadata/swift.sqli.sqlite3-prepare-concat.json
inference/_rules/swift/metadata/swift.sqli.sqlite3-prepare-interpolation.json
inference/_rules/swift/metadata/swift.ssrf.taint.json
inference/_rules/swift/metadata/swift.ssrf.urlsession-request-input.json
inference/_rules/swift/metadata/swift.weak-crypto.des-cipher.json
inference/_rules/swift/metadata/swift.weak-crypto.ecb-mode.json
inference/_rules/swift/metadata/swift.weak-crypto.md5.json
inference/_rules/swift/metadata/swift.weak-crypto.rc4.json
inference/_rules/swift/metadata/swift.weak-crypto.sha1.json
inference/_rules/swift/metadata/swift.weak-crypto.zero-iv.json
inference/_rules/swift/metadata/swift.xss.loadhtmlstring-interpolation.json
inference/_rules/swift/metadata/swift.xss.uiwebview-usage.json
inference/_rules/swift/metadata/swift.xxe.xmldocument-untrusted.json
inference/_rules/swift/metadata/swift.xxe.xmlparser-external-entities.json
inference/_rules/swift/metadata/swift.xxe.xmlparser-untrusted.json
inference/_rules/swift/queries/smoke.swift.dangerous-call.scm
inference/_rules/swift/queries/swift.cmd-injection.popen.scm
inference/_rules/swift/queries/swift.cmd-injection.shell-exec.scm
inference/_rules/swift/queries/swift.code-injection.dlopen-interpolation.scm
inference/_rules/swift/queries/swift.code-injection.eval-javascript-interpolation.scm
inference/_rules/swift/queries/swift.code-injection.evaluatescript-interpolation.scm
inference/_rules/swift/queries/swift.code-injection.nsexpression-interpolation.scm
inference/_rules/swift/queries/swift.code-injection.nspredicate-interpolation.scm
inference/_rules/swift/queries/swift.csrf.cookie-samesite-none.scm
inference/_rules/swift/queries/swift.csrf.vapor-no-protection.guard.scm
inference/_rules/swift/queries/swift.csrf.vapor-no-protection.scm
inference/_rules/swift/queries/swift.csrf.vapor-no-protection.scope.scm
inference/_rules/swift/queries/swift.deserialization.nskeyedunarchiver-legacy.scm
inference/_rules/swift/queries/swift.hardcoded-secret.apikey-assignment.scm
inference/_rules/swift/queries/swift.hardcoded-secret.private-key.scm
inference/_rules/swift/queries/swift.insecure-http.ats-bypass-marker.scm
inference/_rules/swift/queries/swift.insecure-http.http-interpolation.scm
inference/_rules/swift/queries/swift.insecure-http.http-url.scm
inference/_rules/swift/queries/swift.insecure-storage.coredata-add-store-no-protection.scm
inference/_rules/swift/queries/swift.insecure-storage.coredata-password-field.scm
inference/_rules/swift/queries/swift.insecure-storage.coredata-persistent-container.scm
inference/_rules/swift/queries/swift.insecure-storage.keychain-no-accessibility.guard.scm
inference/_rules/swift/queries/swift.insecure-storage.keychain-no-accessibility.scm
inference/_rules/swift/queries/swift.insecure-storage.keychain-no-accessibility.scope.scm
inference/_rules/swift/queries/swift.insecure-storage.plist-credential-read.scm
inference/_rules/swift/queries/swift.insecure-storage.plist-credentials-copy.scm
inference/_rules/swift/queries/swift.insecure-storage.realm-no-encryption.scm
inference/_rules/swift/queries/swift.insecure-storage.userdefaults-sensitive-key.scm
inference/_rules/swift/queries/swift.insecure-storage.write-sensitive-file.sanitizer.scm
inference/_rules/swift/queries/swift.insecure-storage.write-sensitive-file.scm
inference/_rules/swift/queries/swift.insecure-storage.write-sensitive-file.sink.scm
inference/_rules/swift/queries/swift.insecure-storage.write-sensitive-file.source.scm
inference/_rules/swift/queries/swift.nydfs-mfa.keychain-retrieval.scm
inference/_rules/swift/queries/swift.nydfs-mfa.password-verify.scm
inference/_rules/swift/queries/swift.nydfs-mfa.vapor-auth-require.scm
inference/_rules/swift/queries/swift.open-redirect.request-query-redirect.scm
inference/_rules/swift/queries/swift.open-redirect.uiapplication-open-request.scm
inference/_rules/swift/queries/swift.owasp-agentic.excessive-agency-destructive-sql-alt.precond.scm
inference/_rules/swift/queries/swift.owasp-agentic.excessive-agency-destructive-sql-alt.scm
inference/_rules/swift/queries/swift.owasp-agentic.excessive-agency-destructive-sql.precond.scm
inference/_rules/swift/queries/swift.owasp-agentic.excessive-agency-destructive-sql.scm
inference/_rules/swift/queries/swift.owasp-agentic.excessive-agency-file-delete-alt.precond.scm
inference/_rules/swift/queries/swift.owasp-agentic.excessive-agency-file-delete-alt.scm
inference/_rules/swift/queries/swift.owasp-agentic.excessive-agency-file-delete.precond.scm
inference/_rules/swift/queries/swift.owasp-agentic.excessive-agency-file-delete.scm
inference/_rules/swift/queries/swift.owasp-agentic.excessive-agency-shell-tool-alt.precond.scm
inference/_rules/swift/queries/swift.owasp-agentic.excessive-agency-shell-tool-alt.scm
inference/_rules/swift/queries/swift.owasp-agentic.excessive-agency-shell-tool.precond.scm
inference/_rules/swift/queries/swift.owasp-agentic.excessive-agency-shell-tool.scm
inference/_rules/swift/queries/swift.owasp-agentic.output-process.sanitizer.scm
inference/_rules/swift/queries/swift.owasp-agentic.output-process.scm
inference/_rules/swift/queries/swift.owasp-agentic.output-process.sink.scm
inference/_rules/swift/queries/swift.owasp-agentic.output-process.source.scm
inference/_rules/swift/queries/swift.owasp-agentic.output-sql-interpolation.scm
inference/_rules/swift/queries/swift.owasp-agentic.output-webview-rawvar.scm
inference/_rules/swift/queries/swift.owasp-agentic.pii-ssn-literal-in-prompt.scm
inference/_rules/swift/queries/swift.owasp-agentic.prompt-content-interpolation.scm
inference/_rules/swift/queries/swift.owasp-agentic.prompt-injection-macpaw-openai.sanitizer.scm
inference/_rules/swift/queries/swift.owasp-agentic.prompt-injection-macpaw-openai.scm
inference/_rules/swift/queries/swift.owasp-agentic.prompt-injection-macpaw-openai.sink.scm
inference/_rules/swift/queries/swift.owasp-agentic.prompt-injection-macpaw-openai.source.scm
inference/_rules/swift/queries/swift.owasp-agentic.prompt-injection-swift-openai.sanitizer.scm
inference/_rules/swift/queries/swift.owasp-agentic.prompt-injection-swift-openai.scm
inference/_rules/swift/queries/swift.owasp-agentic.prompt-injection-swift-openai.sink.scm
inference/_rules/swift/queries/swift.owasp-agentic.prompt-injection-swift-openai.source.scm
inference/_rules/swift/queries/swift.owasp-agentic.secret-in-prompt.scm
inference/_rules/swift/queries/swift.owasp-agentic.ssn-in-prompt.scm
inference/_rules/swift/queries/swift.path-traversal.file-url-interpolation.scm
inference/_rules/swift/queries/swift.path-traversal.filehandle-interpolation.scm
inference/_rules/swift/queries/swift.path-traversal.string-contentsoffile-interpolation.scm
inference/_rules/swift/queries/swift.phi-coredata.cc-plaintext.scm
inference/_rules/swift/queries/swift.phi-coredata.dob-plaintext.scm
inference/_rules/swift/queries/swift.phi-coredata.medical-plaintext.scm
inference/_rules/swift/queries/swift.phi-coredata.ssn-plaintext.scm
inference/_rules/swift/queries/swift.sensitive-logging.nslog.scm
inference/_rules/swift/queries/swift.sensitive-logging.oslog.scm
inference/_rules/swift/queries/swift.sensitive-logging.print.scm
inference/_rules/swift/queries/swift.sqli.execute-interpolation.scm
inference/_rules/swift/queries/swift.sqli.grdb-sql-interpolation.scm
inference/_rules/swift/queries/swift.sqli.sqlite3-exec.scm
inference/_rules/swift/queries/swift.sqli.sqlite3-prepare-concat.sanitizer.scm
inference/_rules/swift/queries/swift.sqli.sqlite3-prepare-concat.scm
inference/_rules/swift/queries/swift.sqli.sqlite3-prepare-concat.sink.scm
inference/_rules/swift/queries/swift.sqli.sqlite3-prepare-concat.source.scm
inference/_rules/swift/queries/swift.sqli.sqlite3-prepare-interpolation.sanitizer.scm
inference/_rules/swift/queries/swift.sqli.sqlite3-prepare-interpolation.scm
inference/_rules/swift/queries/swift.sqli.sqlite3-prepare-interpolation.sink.scm
inference/_rules/swift/queries/swift.sqli.sqlite3-prepare-interpolation.source.scm
inference/_rules/swift/queries/swift.ssrf.taint.sanitizer.scm
inference/_rules/swift/queries/swift.ssrf.taint.scm
inference/_rules/swift/queries/swift.ssrf.taint.sink.scm
inference/_rules/swift/queries/swift.ssrf.taint.source.scm
inference/_rules/swift/queries/swift.ssrf.urlsession-request-input.scm
inference/_rules/swift/queries/swift.weak-crypto.des-cipher.scm
inference/_rules/swift/queries/swift.weak-crypto.ecb-mode.scm
inference/_rules/swift/queries/swift.weak-crypto.md5.scm
inference/_rules/swift/queries/swift.weak-crypto.rc4.scm
inference/_rules/swift/queries/swift.weak-crypto.sha1.scm
inference/_rules/swift/queries/swift.weak-crypto.zero-iv.scm
inference/_rules/swift/queries/swift.xss.loadhtmlstring-interpolation.scm
inference/_rules/swift/queries/swift.xss.uiwebview-usage.scm
inference/_rules/swift/queries/swift.xxe.xmldocument-untrusted.scm
inference/_rules/swift/queries/swift.xxe.xmlparser-external-entities.scm
inference/_rules/swift/queries/swift.xxe.xmlparser-untrusted.guard.scm
inference/_rules/swift/queries/swift.xxe.xmlparser-untrusted.scm
inference/_rules/swift/queries/swift.xxe.xmlparser-untrusted.scope.scm
inference/_rules/typescript/metadata/smoke.typescript.dangerous-call.json
inference/_rules/typescript/metadata/typescript.cmd-injection.exec-template-literal.json
inference/_rules/typescript/metadata/typescript.code-injection.eval-dynamic.json
inference/_rules/typescript/metadata/typescript.code-injection.eval-type-assertion.json
inference/_rules/typescript/metadata/typescript.code-injection.function-constructor.json
inference/_rules/typescript/metadata/typescript.code-injection.settimeout-string.json
inference/_rules/typescript/metadata/typescript.cra.network-impact-resilience.json
inference/_rules/typescript/metadata/typescript.cra.secure-default-config.json
inference/_rules/typescript/metadata/typescript.cra.secure-default-cors.json
inference/_rules/typescript/metadata/typescript.cra.secure-update-channel.json
inference/_rules/typescript/metadata/typescript.deserialization.node-serialize.json
inference/_rules/typescript/metadata/typescript.deserialization.yaml-load.json
inference/_rules/typescript/metadata/typescript.improper-input-validation.decorator-param-any.json
inference/_rules/typescript/metadata/typescript.injection.ts-ignore-masked-sink.json
inference/_rules/typescript/metadata/typescript.open-redirect.window-location-assignment.json
inference/_rules/typescript/metadata/typescript.path-traversal.fs-template-literal.json
inference/_rules/typescript/metadata/typescript.sensitive-data-logging.console-template.json
inference/_rules/typescript/metadata/typescript.session-fixation.session-id-from-request.json
inference/_rules/typescript/metadata/typescript.sqli.query-as-any-cast.json
inference/_rules/typescript/metadata/typescript.sqli.template-literal.json
inference/_rules/typescript/metadata/typescript.ssrf.fetch-from-request.json
inference/_rules/typescript/metadata/typescript.weak-crypto.blowfish.json
inference/_rules/typescript/metadata/typescript.weak-crypto.des.json
inference/_rules/typescript/metadata/typescript.weak-crypto.ecb.json
inference/_rules/typescript/metadata/typescript.weak-crypto.md5.json
inference/_rules/typescript/metadata/typescript.weak-crypto.rc4.json
inference/_rules/typescript/metadata/typescript.weak-crypto.sha1.json
inference/_rules/typescript/metadata/typescript.xss.document-write-dynamic.json
inference/_rules/typescript/metadata/typescript.xss.innerhtml-dynamic.json
inference/_rules/typescript/metadata/typescript.xss.innerhtml-type-assertion.json
inference/_rules/typescript/queries/smoke.typescript.dangerous-call.scm
inference/_rules/typescript/queries/typescript.cmd-injection.exec-template-literal.scm
inference/_rules/typescript/queries/typescript.code-injection.eval-dynamic.scm
inference/_rules/typescript/queries/typescript.code-injection.eval-type-assertion.scm
inference/_rules/typescript/queries/typescript.code-injection.function-constructor.scm
inference/_rules/typescript/queries/typescript.code-injection.settimeout-string.scm
inference/_rules/typescript/queries/typescript.cra.network-impact-resilience.scm
inference/_rules/typescript/queries/typescript.cra.secure-default-config.scm
inference/_rules/typescript/queries/typescript.cra.secure-default-cors.scm
inference/_rules/typescript/queries/typescript.cra.secure-update-channel.scm
inference/_rules/typescript/queries/typescript.deserialization.node-serialize.scm
inference/_rules/typescript/queries/typescript.deserialization.yaml-load.scm
inference/_rules/typescript/queries/typescript.improper-input-validation.decorator-param-any.scm
inference/_rules/typescript/queries/typescript.injection.ts-ignore-masked-sink.scm
inference/_rules/typescript/queries/typescript.open-redirect.window-location-assignment.scm
inference/_rules/typescript/queries/typescript.path-traversal.fs-template-literal.scm
inference/_rules/typescript/queries/typescript.sensitive-data-logging.console-template.scm
inference/_rules/typescript/queries/typescript.session-fixation.session-id-from-request.scm
inference/_rules/typescript/queries/typescript.sqli.query-as-any-cast.scm
inference/_rules/typescript/queries/typescript.sqli.template-literal.scm
inference/_rules/typescript/queries/typescript.ssrf.fetch-from-request.scm
inference/_rules/typescript/queries/typescript.weak-crypto.blowfish.scm
inference/_rules/typescript/queries/typescript.weak-crypto.des.scm
inference/_rules/typescript/queries/typescript.weak-crypto.ecb.scm
inference/_rules/typescript/queries/typescript.weak-crypto.md5.scm
inference/_rules/typescript/queries/typescript.weak-crypto.rc4.scm
inference/_rules/typescript/queries/typescript.weak-crypto.sha1.scm
inference/_rules/typescript/queries/typescript.xss.document-write-dynamic.scm
inference/_rules/typescript/queries/typescript.xss.innerhtml-dynamic.scm
inference/_rules/typescript/queries/typescript.xss.innerhtml-type-assertion.scm
l2_integration/__init__.py
l2_integration/abstraction.py
l2_integration/anthropic_client.py
l2_integration/budget.py
l2_integration/cache.py
l2_integration/escalation.py
l2_integration/google_client.py
l2_integration/openai_client.py
l2_integration/openai_compatible.py
l2_integration/proactive.py
l2_integration/sarif.py
l2_integration/prompts/__init__.py
l2_integration/prompts/_base.py
l2_integration/prompts/cwe_22_path_traversal.py
l2_integration/prompts/cwe_327_weak_crypto.py
l2_integration/prompts/cwe_502_deserialization.py
l2_integration/prompts/cwe_78_command_injection.py
l2_integration/prompts/cwe_79_xss.py
l2_integration/prompts/cwe_89_sql_injection.py
l2_integration/prompts/cwe_918_ssrf.py
l2_integration/prompts/discovery.py
mergeguide_nge.egg-info/PKG-INFO
mergeguide_nge.egg-info/SOURCES.txt
mergeguide_nge.egg-info/dependency_links.txt
mergeguide_nge.egg-info/entry_points.txt
mergeguide_nge.egg-info/requires.txt
mergeguide_nge.egg-info/top_level.txt
tree-sitter-rules/engine/__init__.py
tree-sitter-rules/engine/grammars.py
tree-sitter-rules/engine/runtime.py
tree-sitter-rules/engine/schema.py