rules:
- id: require-encryption
  patterns:
  - pattern-not: |
      distributed.security.Security(..., require_encryption=True, ...)
  - pattern: |
      distributed.security.Security(...)
  fix: distributed.security.Security(..., require_encryption=True, ...)
  message: >-
    Initializing the a security context for Dask (`distributed`) without "require_encription" keyword argument may silently fail to provide security. See https://distributed.dask.org/en/latest/tls.html?highlight=require_encryption#parameters
  severity: WARNING
  metadata:
    category: security
    technology:
    - distributed
  languages:
  - python