rules:
- id: hardcoded-password-default-argument
  message: >-
    Hardcoded password is used as a default argument to '$FUNC'. This could be dangerous
    if
    a real password is not supplied.
  languages: [python]
  severity: WARNING
  pattern: |
    def $FUNC(..., password="...", ...):
      ...
  metadata:
    category: security
    technology:
    - python