id: codeclimate-config-exposure

info:
  name: CodeClimate Configuration File - Exposure
  author: 0x_Akoko
  severity: info
  description: |
    Detected CodeClimate configuration file, exposing code quality settings and excluded paths.
  reference:
    - https://docs.codeclimate.com/docs/configuring-your-workflow
  metadata:
    verified: true
    max-request: 1
  tags: exposure,config,codeclimate

http:
  - method: GET
    path:
      - "{{BaseURL}}/.codeclimate.yml"

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - "languages:"
          - "engines:"
          - "exclude_paths:"
        condition: and

      - type: status
        status:
          - 200
# digest: 490a0046304402204e4cb5db5640b7c5cfc04f18f10d9a175662e42928ed34cc7a665983e636009202207a67a798c1b9df1000f5de2bdb4e47359f215b8629712c312319bab374bc55d6:922c64590222798bb761d5b6d8e72950