Add Ruby AST support using tree-sitter-ruby

- Added `tree-sitter-ruby` dependency to `Cargo.toml` and `Cargo.lock`.
- Introduced `patterns/ruby.rs` with Ruby-specific AST patterns for vulnerability detection.
- Updated `patterns/mod.rs` and `ast.rs` to support Ruby AST parsing and pattern registry initialization.

src/patterns/mod.rs

@@ -7,6 +7,7 @@ mod java;
 mod go;
 mod php;
 mod python;
+mod ruby;
 
 use std::collections::HashMap;
 use std::fmt;
@@ -52,20 +53,6 @@ impl FromStr for Severity { // TODO: FIX
   }
 }
 
-// /// How bad / noisy a pattern is considered.
-// #[derive(Debug, Clone, Copy, Serialize, Deserialize, PartialEq, PartialOrd)]
-// pub enum Severity {
-//   Low,
-//   Medium,
-//   High,
-// }
-// 
-// impl Severity {
-//   pub(crate) fn as_db_str(&self) -> &str {
-//     todo!()
-//   }
-// }
-
 /// One AST pattern with a tree-sitter query and meta-data.
 #[derive(Debug, Clone, Serialize)]
 pub struct Pattern {
@@ -108,6 +95,8 @@ static REGISTRY: Lazy<HashMap<&'static str, &'static [Pattern]>> = Lazy::new(||
   m.insert("php", php::PATTERNS);
   m.insert("python", python::PATTERNS);
   m.insert("py", python::PATTERNS);
+  m.insert("ruby", ruby::PATTERNS);
+  m.insert("rb", ruby::PATTERNS);
 
   tracing::debug!("AST-pattern registry initialised ({} languages)", m.len());
   
@@ -121,7 +110,7 @@ pub fn load(lang: &str) -> Vec<Pattern> {
   let key = lang.to_ascii_lowercase();
   REGISTRY
     .get(key.as_str())
-    .copied()            // `&'static [Pattern]` → *copy* the slice pointer
-    .unwrap_or(&[])      // unknown lang ⇒ empty slice
-    .to_vec()            // caller owns the `Vec`
+    .copied()           
+    .unwrap_or(&[])   
+    .to_vec()         
 }

src/patterns/ruby.rs

@@ -0,0 +1,137 @@
+use crate::patterns::{Pattern, Severity};
+pub const PATTERNS: &[Pattern] = &[
+  // ---------- Runtime code-execution primitives ----------
+  Pattern {
+    id: "eval_call",
+    description: "Kernel#eval usage",
+    query: r#"
+          (call
+            (identifier) @id
+            (#eq? @id "eval")
+          ) @vuln
+        "#,
+    severity: Severity::High,
+  },
+  Pattern {
+    id: "instance_eval_call",
+    description: "Object#instance_eval usage",
+    query: r#"
+          (call
+            (identifier) @id
+            (#eq? @id "instance_eval")
+          ) @vuln
+        "#,
+    severity: Severity::High,
+  },
+  Pattern {
+    id: "class_eval_call",
+    description: "Module#class_eval / module_eval usage",
+    query: r#"
+          (call
+            (identifier) @id
+            (#match? @id "^(class_eval|module_eval)$")
+          ) @vuln
+        "#,
+    severity: Severity::High,
+  },
+
+  // ---------- Shell execution ----------
+  Pattern {
+    id: "system_exec_interp",
+    description: "system/exec with string interpolation",
+    query: r#"
+          (call
+            method: (identifier) @m
+            (#match? @m "^(system|exec)$")
+            arguments: (argument_list
+              (string
+                (interpolation)+ @vuln
+              )
+            )
+          )
+        "#,
+    severity: Severity::High,
+  },
+  Pattern {
+    id: "backtick_command",
+    description: "Back-tick shell execution",
+    // `uname -a`
+    query: r#"(shell_command) @vuln"#,
+    severity: Severity::High,
+  },
+
+  // ---------- Dangerous deserialisation ----------
+  Pattern {
+    id: "yaml_load",
+    description: "YAML.load / Psych.load (arbitrary object deserialisation)",
+    query: r#"
+          (call
+            receiver: (constant) @recv
+            (#match? @recv "^(YAML|Psych)$")
+            method: (identifier) @m
+            (#eq? @m "load")
+          ) @vuln
+        "#,
+    severity: Severity::High,
+  },
+  Pattern {
+    id: "marshal_load",
+    description: "Marshal.load usage",
+    query: r#"
+          (call
+            receiver: (constant) @recv
+            (#eq? @recv "Marshal")
+            method: (identifier) @m
+            (#eq? @m "load")
+          ) @vuln
+        "#,
+    severity: Severity::High,
+  },
+
+  // ---------- Reflection / meta-programming ----------
+  Pattern {
+    id: "send_dynamic",
+    description: "send() with dynamic first argument (not a literal symbol)",
+    query: r#"
+          (call
+            method: (identifier) @m
+            (#eq? @m "send")
+            arguments: (argument_list
+              [
+                (identifier)                ; send(method_name_var, …)
+                (string (interpolation)+)   ; send("user_#{role}", …)
+              ] @vuln
+            )
+          )
+        "#,
+    severity: Severity::Medium,
+  },
+  Pattern {
+    id: "constantize_call",
+    description: "ActiveSupport constantize / safe_constantize on tainted data",
+    query: r#"
+          (call
+            method: (identifier) @m
+            (#match? @m "^(constantize|safe_constantize)$")
+          ) @vuln
+        "#,
+    severity: Severity::Medium,
+  },
+
+  // ---------- Insecure resource access ----------
+  Pattern {
+    id: "open_uri_http",
+    description: "Kernel#open with HTTP(S) URL (open-uri auto-follow)",
+    query: r#"
+          (call
+            method: (identifier) @m
+            (#eq? @m "open")
+            arguments: (argument_list
+              (string) @url
+              (#match? @url "^\"https?://")
+            )
+          ) @vuln
+        "#,
+    severity: Severity::Medium,
+  },
+];