mcp-server-semgrep/semgrep-rules/bash/lang/best-practice/iteration-over-ls-output.yaml

MCP Server for Semgrep Integration - static code analysis with AI

rules:
  - id: iteration-over-ls-output
    patterns:
      - pattern: |
          for $VAR in $LIST; do
            ...
          done
      - pattern: |
          $(ls ...)
    message: >-
      Iterating over ls output is fragile. Use globs, e.g. 'dir/*' instead
      of '$(ls dir)'.
    metadata:
      references:
        - https://github.com/koalaman/shellcheck/wiki/SC2045
      category: best-practice
      technology:
        - bash
    severity: WARNING
    languages:
      - bash