rules:
- id: yaml-parsing
  message: >-
    Detected enabled YAML parsing. This is vulnerable to remote code execution in
    Rails 2.x
    versions up to 2.3.14. To fix, delete this line.
  fix-regex:
    regex: ActionController.*:yaml
    replacement: ' '
  severity: WARNING
  languages:
  - ruby
  pattern: ActionController::Base.param_parsers[Mime::YAML] = :yaml
  metadata:
    category: security
    technology:
    - ruby