rules:
  - id: org.yourorg.java.hardcoded-jdbc-credentials
    languages: [java]
    message: "Possible hardcoded DB credentials in DriverManager.getConnection(). Use a secret manager."
    severity: ERROR
    pattern: |
      DriverManager.getConnection($URL, $USER, $PASS)