gruff-rs 0.4.0

Rust static analyzer and quality linter for CI: dead-code, complexity, security, secrets, and architecture rules with deterministic SARIF/JSON output and baseline support.
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47

use super::*;

pub(crate) const WASTE_RULES: &[RuleDefinition] = &[
    RuleDefinition {
        default_enabled: false,
        ..rule_definition!(
            "waste.unnecessary-clone-candidate",
            "Unnecessary clone candidate",
            Pillar::Maintainability,
            RuleKind::Rust,
            Severity::Advisory,
            Confidence::High,
            None,
            "Flags clone calls that may be avoidable.",
        )
    },
    rule_definition!(
        "waste.unreachable-code",
        "Unreachable code",
        Pillar::DeadCode,
        RuleKind::Rust,
        Severity::Warning,
        Confidence::High,
        None,
        "Flags statements after terminating statements.",
    ),
    rule_definition!(
        "waste.unwrap-expect",
        "Unwrap or expect",
        Pillar::Maintainability,
        RuleKind::Rust,
        Severity::Advisory,
        Confidence::High,
        None,
        "Flags unwrap and expect calls outside test attributes.",
        false_positives: &[
            FalsePositiveShape {
                shape: "Owned values consumed via `.unwrap_or_default()` or other infallible variants the regex cannot distinguish from `.unwrap()`.",
                mitigation: "Rule already skips `unwrap_or`/`unwrap_or_default`/`unwrap_or_else`; if a real false positive lands, file with the call shape so the carve-out can be extended.",
            },
        ],
        related: &[
            "error-handling.public-unwrap",
            "test-quality.unwrap-in-test",
        ],
    ),
];