Function walk_ast

src/pyspector/_rust_core/src/analysis/ast_analysis.rs:25–59

Recursively walks the AST, checking each node against pre-filtered rules. Rules are already filtered for this file — no exclusion checks needed here.

(node: &AstNode, file_path: &str, content: &str, rules: &[&Rule], issues: &mut Vec<Issue>)

// Recursively walks the AST, checking each node against pre-filtered rules.
// Rules are already filtered for this file — no exclusion checks needed here.
fn walk_ast(node: &AstNode, file_path: &str, content: &str, rules: &[&Rule], issues: &mut Vec<Issue>) {
    for rule in rules.iter() {
        if let Some(match_pattern) = &rule.ast_match {
            if check_node_match(node, match_pattern) {
                let line_content = content.lines().nth(node.lineno.saturating_sub(1) as usize).unwrap_or("").to_string();

                // Respect line-level exclude_pattern on the matched line
                if let Some(exclude) = &rule.exclude_pattern {
                    if exclude.is_match(&line_content) {
                        continue;
                    }
                }

                issues.push(Issue::new(
                    rule.id.clone(),
                    rule.description.clone(),
                    file_path.to_string(),
                    node.lineno as usize,
                    line_content,
                    rule.severity.clone(),
                    rule.confidence.clone(),
                    rule.remediation.clone(),
                    rule.cwe.clone(),
                ));
            }
        }
    }

    // Recurse into children
    for child_list in node.children.values() {
        for child_node in child_list {
            walk_ast(child_node, file_path, content, rules, issues);
        }
    }
}

fn check_node_match(node: &AstNode, match_pattern: &str) -> bool {
    let (node_type_match, props_str) = if let Some(open_paren) = match_pattern.find('(') {