crypto.yml

rules:
- id: crypto
  message: |
    Insecure Cryptographic Functions being Used. Please investigate further
  severity: ERROR
  patterns:
  - pattern-either:
    - pattern: | #Identify any parameter value being equated to Strings using equals method
        $RETURN $METHOD(...,String $VAR, ...) {
          ...
          if(<... $VAR.equals("...") ...>)
          ...
        }
    - pattern: String secret = "..." ;
    - pattern: String key = "..." ;
    - pattern: String token = "..." ;

  languages:
  - java