SG-045: Conditional Trigger Variants
Severity: HIGH
Date / git-remote / locale-gated activation paired with action verbs
Fires when
- A date-gated condition (`after`/`on or after`/`>= <date>`) paired with a proximate action verb (run/execute/exfiltrate/delete/curl/wget/bash).
- A repo/branch/git-remote check (remote url or branch/repo contains/matches/equals a value) paired with a proximate action verb.
- A locale/timezone gate ($LANG/$LC_ALL/$TZ/getTimezoneOffset contains/starts-with/equals a value) paired with a proximate action verb.
Remediation
No safe remediation: a file that triggers this rule should be rejected, not patched. Read the flagged lines in the source before deciding.