hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-05 05:35:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #564 from taus-semmle/python-insecure-ssl-version

Browse Source 
Python: Check for insecure versions of SSL and TLS.
This commit is contained in:
Mark Shannon
2019-01-16 12:32:30 +00:00
committed by GitHub
parent 370a9e491c 41836cdf8c
commit 65337ef835
15 changed files with 363 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

26
change-notes/1.20/analysis-python.md Normal file
View File

@@ -0,0 +1,26 @@
# Improvements to Python analysis
## General improvements
> Changes that affect alerts in many files or from many queries
> For example, changes to file classification
## New queries
| **Query** | **Tags** | **Purpose** |
|-----------------------------|-----------|--------------------------------------------------------------------|
| Default version of SSL/TLS may be insecure (`py/insecure-default-protocol`) | security, external/cwe/cwe-327 | Finds instances where an insecure default protocol may be used. Results are shown on LGTM by default. |
| Use of insecure SSL/TLS version (`py/insecure-protocol`) | security, external/cwe/cwe-327 | Finds instances where a known insecure protocol has been specified. Results are shown on LGTM by default. |
## Changes to existing queries
| **Query** | **Expected impact** | **Change** |
|----------------------------|------------------------|------------------------------------------------------------------|
## Changes to code extraction
* *Series of bullet points*
## Changes to QL libraries
* *Series of bullet points*