code: func NewSubproc(id string, conf gosec.Config) (gosec.Rule, []ast.Node) {
  	rule := &subprocess{gosec.MetaData{ID: id}, gosec.NewCallList()}
  	rule.Add("os/exec", "Command")
  	rule.Add("os/exec", "CommandContext")
  	rule.Add("syscall", "Exec")
  	return rule, []ast.Node{(*ast.CallExpr)(nil)}
  }
docs: // NewSubproc detects cases where we are forking out to an external process