Behaviour and macro for defining MetaCredo checks.

Mirrors Credo.Check ergonomics but operates on MetaAST via Metastatic.

Usage

defmodule MetaCredo.Check.Security.HardcodedValue do
  use MetaCredo.Check,
    category: :security,
    base_priority: :high,
    param_defaults: [exclude_localhost: true],
    explanations: [
      check: "Detects hardcoded URLs, IPs, and sensitive values.",
      params: [
        exclude_localhost: "Skip localhost URLs (default: true)"
      ]
    ]

  @impl true
  def run(%SourceFile{} = source_file, params) do
    source_file
    |> SourceFile.ast()
    |> Metastatic.AST.prewalk([], &traverse(&1, &2, params))
    |> elem(1)
  end

  defp traverse({:literal, meta, value} = _node, issues, _params)
       when is_list(meta) and is_binary(value) do
    # ... detection logic ...
    issues
  end
end