Skip to content

Instantly share code, notes, and snippets.

@rohitnss
Created Jul 29, 2020
Embed
What would you like to do?
rules:
- id: crypto
message: |
Insecure Cryptographic Functions being Used. Please investigate further
severity: ERROR
patterns:
- pattern-either:
- pattern: | #Identify any parameter value being equated to Strings using equals method
$RETURN $METHOD(...,String $VAR, ...) {
...
if(<... $VAR.equals("...") ...>)
...
}
- pattern: String secret = "..." ;
- pattern: String key = "..." ;
- pattern: String token = "..." ;
languages:
- java
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment