mcp-server-semgrep/semgrep-rules/python/lang/correctness/common-mistakes/string-concat-in-list.yaml

MCP Server for Semgrep Integration - static code analysis with AI

rules:
  - id: string-concat-in-list
    patterns:
      - pattern-either:
          - pattern-inside: "[...]"
          - pattern-inside: "{...}"
      - pattern: '"..." "..."'
      - pattern-not-inside: f"..."
      - pattern-not-inside: "{..., $KEY: $VALUE, ...}"
    message: >-
      Detected strings that are implicitly concatenated inside a list.
      Python will implicitly concatenate strings when not explicitly delimited.
      Was this supposed to be individual elements of the list?
    severity: WARNING
    languages:
      - python
    metadata:
      category: correctness
      technology:
        - python