gitops-secrets/semgrep_configs/eval.yaml

SecretOps workflow for bundling encrypted secrets into your deployments to safely decrypt at runtime.

rules:
  - id: eval-search
    severity: ERROR
    languages:
      - javascript
      - typescript
    message: eval() is evil
    patterns:
      - pattern: eval(...)