mcp-server-semgrep/semgrep-rules/ocaml/lang/security/tempfile.yaml

MCP Server for Semgrep Integration - static code analysis with AI

rules:
  - id: ocamllint-tempfile
    pattern: Filename.temp_file
    message: Filename.temp_file might lead to race conditions, since the file could be altered or replaced by a symlink before being opened.
    languages: [ocaml]
    severity: WARNING
    metadata:
      category: security
      references:
      - https://v2.ocaml.org/api/Filename.html
      technology:
        - ocaml
      cwe: "CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition"
      confidence: LOW
      likelihood: MEDIUM
      impact: MEDIUM
      subcategory:
        - audit