[
  {
    "id": "ENV001",
    "pattern": "(?:println!|eprintln!)\\s*\\(\\s*\"[^\"]*(?:API_KEY|password|secret|token)[^\"]*\"",
    "flags": "i",
    "category": "env_injection",
    "description": "Rust: env var / secret injection into logs or responses",
    "language": [
      "rust"
    ],
    "severity": "medium"
  },
  {
    "id": "ENV002",
    "pattern": "env::vars\\s*\\(\\s*\\)",
    "flags": "",
    "category": "env_injection",
    "description": "Rust: env var / secret injection into logs or responses",
    "language": [
      "rust"
    ],
    "severity": "medium"
  },
  {
    "id": "ENV003",
    "pattern": "env::var\\s*\\(\\s*key\\s*\\)",
    "flags": "",
    "category": "env_injection",
    "description": "Rust: env var / secret injection into logs or responses",
    "language": [
      "rust"
    ],
    "severity": "medium"
  },
  {
    "id": "ENV004",
    "pattern": "json!\\s*\\(\\s*\\{[\\s\\S]*?env::var",
    "flags": "",
    "category": "env_injection",
    "description": "Rust: env var / secret injection into logs or responses",
    "language": [
      "rust"
    ],
    "severity": "medium"
  }
]