rules:
- id: ssl-mode-no-verify
  pattern: OpenSSL::SSL::VERIFY_NONE
  message: >-
    Detected SSL that will accept an unverified connection.
    This makes the connections susceptible to man-in-the-middle attacks.
    Use 'OpenSSL::SSL::VERIFY_PEER' instead.
  fix-regex:
    regex: VERIFY_NONE
    replacement: VERIFY_PEER
  severity: WARNING
  languages:
  - ruby
  metadata:
    category: security
    technology:
    - ruby