mcp-server-semgrep/semgrep-rules/terraform/gcp/best-practice/gcp-mysql-local-in-file-off.yaml

MCP Server for Semgrep Integration - static code analysis with AI

rules:
    - id: gcp-mysql-local-in-file-off
      patterns:
        - pattern: resource
        - pattern-inside: |
              resource "google_sql_database_instance" "..." {
                ...
                database_flags {
                  ...
                  name  = "local_infile"
                  value = "on"
                  ...
                }
                ...
              }
      message: >-
        Ensure MySQL database 'local_infile' flag is set to 'off'
      metadata:
        category: best-practice
        technology:
          - terraform
          - gcp
      languages: [hcl]
      severity: WARNING