Rule covering OWASP Top 10, secrets handling, input validation, secure cookies and dependency CVE awareness.