rules-chroma

Potentially unsafe pattern detected in chroma code: "Chroma(persist_directory=". Review the use case — this may indicate a security risk, a deprecated API, or a misconfiguration. Confirm the write is intentional.

You are using an outdated API for chroma. Please upgrade to the newer API.

Hardcoded Chroma authentication token detected (CWE-798). Embedding bearer tokens or credentials directly in source code leaks them via version control. Load the token from an environment variable (e.g. os.environ['CHROMA_TOKEN']) or a secrets manager.

Plaintext HTTP connection to a remote Chroma server transmits embeddings and metadata in cleartext, exposing sensitive data to network interception (CWE-319). Use HTTPS (ssl=True or an https:// host) for any non-localhost Chroma deployment.

Chroma 'where' filter constructed via string formatting or concatenation with an external variable. Chroma's filter engine evaluates the where dict server-side; injecting attacker-controlled keys or values can bypass collection access controls (CWE-943). Build the where dict from a validated allowlist of fields and literal values.

Remote Chroma HttpClient instantiated without authentication settings. Unauthenticated Chroma HTTP endpoints allow any network-adjacent host to read, write, or delete all collections (CWE-306). Pass chromadb.Settings with chroma_client_auth_provider and credentials, or restrict the Chroma server to localhost.