Disclosure: Create semgrep rules
See https://gitlab.com/gitlab-org/gitlab/-/issues/?label_name%5B%5D=dropdown%3A%3Adisclosure for existing implementations.
The initial set of rules do not have to be perfect, it is okay for them to have false positives or false negatives. We are learning to create rules as we go.