mcp-server-semgrep/semgrep-rules/yaml/argo/correctness/event-binding-payload-with-hyphen.yaml

MCP Server for Semgrep Integration - static code analysis with AI

rules:
- id: event-binding-payload-with-hyphen
  languages: [yaml]
  severity: WARNING
  message: The parameter `$VALUE` to this WorkflowEventBinding includes hyphens, which will, very confusingly, throw an error when Argo Workflows tries to invoke the workflow. Set the payload value to use underscores instead.
  metadata:
    category: correctness
    references:
      - https://argoproj.github.io/argo-workflows/variables/#expression
    technology:
    - argo
    - argo-workflows
  match:
    all:
    - inside: |
        apiVersion: argoproj.io/v1alpha1
        kind: WorkflowEventBinding
        ...
    - inside: |
        spec:
          ...
          submit:
            ...
            arguments:
              ...
              parameters:
                ...
    - |
      event: $VALUE
    where:
    - metavariable: $VALUE
      regex: >-
        payload\..*-.*