Rule: walk-no-path

[anderseknert]

Avoid

allow if {
    # path is bound but never referenced
    walk(users, [path, value])

    value.type == "user"
    value.is_admin == true
}

Prefer

allow if {
    # wildcard used for path
    walk(users, [_, value])

    value.type == "user"
    value.is_admin == true
}

The latter is optimized in the evaluation, as the path does not need to be constructed in each iteration. This saves a ton of allocations when traversing large nodes.