fixup! feat: Rule for hard-coded key

getappmap · Aug 4, 2022 · fcb474d · fcb474d
1 parent 13036b6
commit fcb474d
Showing 1 changed file with 5 additions and 2 deletions.
diff --git a/packages/scanner/doc/rules/hard-coded-key.md b/packages/scanner/doc/rules/hard-coded-key.md
@@ -10,5 +10,8 @@ labels:
   - crypto.decrypt
   - crypto.set_key
   - string.unpack
-scope: root
----
+---
+
+Finds occurrances in which a cryptographic key is used that is not provided by a function.
+
+`string.unpack` functions are an exception, because they are only modifying, not creating, the key.