Python: Remove 'response' from default threat-models

I didn't want to put the configuration file in
`semmle/python/frameworks/**/*.model.yml`, so created `ext/` as in other
languages
This commit is contained in:
Rasmus Wriedt Larsen
2024-08-09 11:29:16 +02:00
parent 617ab27c75
commit 8f7dec07b8
3 changed files with 9 additions and 1 deletions

View File

@@ -0,0 +1,8 @@
extensions:
- addsTo:
pack: codeql/threat-models
extensible: threatModelConfiguration
data:
# Since responses are enabled by default in the shared threat-models configuration,
# we need to disable it here to keep existing behavior for the python analysis.
- ["response", false, -2147483647]

View File

@@ -16,4 +16,5 @@ dependencies:
codeql/yaml: ${workspace}
dataExtensions:
- semmle/python/frameworks/**/*.model.yml
- ext/*.model.yml
warnOnImplicitThis: true

View File

@@ -1,4 +1,3 @@
| default |
| remote |
| request |
| response |