Add TypeScript security rules and tooling

- Add ts-node security rules for runtime protection

Author: gatsby003

.gitignore

@@ -197,3 +197,4 @@ cscope.in.out
 cscope.po.out
 
 # End of https://www.toptal.com/developers/gitignore/api/node,tags,macos
+.claude

package.json

@@ -14,4 +14,4 @@
   "devDependencies": {
     "@ast-grep/cli": "^0.31.1"
   }
-}
+}

rules/c/security/null-library-function-c.yml

@@ -259,4 +259,4 @@ rule:
        - inside:
            stopBy: end
            kind: return_statement
-   
+   

rules/cpp/security/null-library-function-cpp.yml

@@ -259,4 +259,4 @@ rule:
        - inside:
            stopBy: end
            kind: return_statement
-   
+   

rules/go/security/grpc-client-insecure-connection-go.yml

@@ -63,4 +63,4 @@ rule:
               kind: ERROR
           - has:
               stopBy: end
-              kind: ERROR
+              kind: ERROR

rules/html/security/plaintext-http-link-html.yml

@@ -77,4 +77,4 @@ rule:
                     stopBy: end
                     kind: attribute_value
                     regex: ^([Hh][Tt][Tt][Pp]://)
-                          
+                          

rules/java/security/hardcoded-connection-password-java.yml

@@ -349,4 +349,4 @@ rule:
     - matches: (jdo.PersistenceManagerFactory $JDO). ... .$SETPASS("...")
     - matches: (jdo.PersistenceManagerFactory $JDO). ... .$SETPASS("...")_with_Instance
     - matches: (PersistenceManagerFactory $JDO). ... .$SETPASS("...")
-    - matches: (PersistenceManagerFactory $JDO). ... .$SETPASS("...")_with_Instance
+    - matches: (PersistenceManagerFactory $JDO). ... .$SETPASS("...")_with_Instance

rules/java/security/java-jwt-hardcoded-secret-java.yml

@@ -126,4 +126,4 @@ rule:
          kind: ERROR
      - inside:
          stopBy: end
-         kind: ERROR
+         kind: ERROR

rules/java/security/jedis-jedisclientconfig-hardcoded-password-java.yml

@@ -827,4 +827,4 @@ rule:
     - matches: clients.jedis.DefaultJedisClientConfig.Builder $JEDIS).password("...")
     - matches: clients.jedis.DefaultJedisClientConfig.create($CONNECTIONTIMEOUTMILLIS, $SOTIMEOUTMILLIS, $BLOCKINGSOCKETTIMEOUTMILLIS, $USER, "...")
     - matches: new clients.jedis.DefaultJedisClientConfig($CONNECTIONTIMEOUTMILLIS, $SOTIMEOUTMILLIS, $BLOCKINGSOCKETTIMEOUTMILLIS, $USER, "...")
-    - matches: (clients.jedis.JedisClientConfig|clients.jedis.DefaultJedisClientConfig $JEDIS).updatePassword("...")
+    - matches: (clients.jedis.JedisClientConfig|clients.jedis.DefaultJedisClientConfig $JEDIS).updatePassword("...")

rules/java/security/use-of-default-aes-java.yml

@@ -317,4 +317,4 @@ constraints:
     all:
     - has:
        kind: string_fragment
-       regex: ^\s*(AES)\s*$
+       regex: ^\s*(AES)\s*$