code: func NewBadTempFile(id string, conf gosec.Config) (gosec.Rule, []ast.Node) {
  	calls := gosec.NewCallList()
  	calls.Add("io/ioutil", "WriteFile")
  	calls.Add("os", "Create")
  	return &badTempFile{
  		calls: calls,
  		args:  regexp.MustCompile(`^/tmp/.*$|^/var/tmp/.*$`),
  		MetaData: gosec.MetaData{
  			ID:         id,
  			Severity:   gosec.Medium,
  			Confidence: gosec.High,
  			What:       "File creation in shared tmp directory without using ioutil.Tempfile",
  		},
  	}, []ast.Node{(*ast.CallExpr)(nil)}
  }
docs: // NewBadTempFile detects direct writes to predictable path in temporary directory