1 2 3 4 5 6 7 8
rules: - id: sql-injection pattern: '"..." + $VAR' message: Possible SQL injection via string concatenation severity: ERROR languages: [python] metadata: cwe: "CWE-89"