mirror of
https://github.com/github/codeql.git
synced 2025-12-16 16:53:25 +01:00
Python: Remove 'response' from default threat-models
I didn't want to put the configuration file in `semmle/python/frameworks/**/*.model.yml`, so created `ext/` as in other languages
This commit is contained in:
8
python/ql/lib/ext/default-threat-models-fixup.model.yml
Normal file
8
python/ql/lib/ext/default-threat-models-fixup.model.yml
Normal file
@@ -0,0 +1,8 @@
|
||||
extensions:
|
||||
- addsTo:
|
||||
pack: codeql/threat-models
|
||||
extensible: threatModelConfiguration
|
||||
data:
|
||||
# Since responses are enabled by default in the shared threat-models configuration,
|
||||
# we need to disable it here to keep existing behavior for the python analysis.
|
||||
- ["response", false, -2147483647]
|
||||
@@ -16,4 +16,5 @@ dependencies:
|
||||
codeql/yaml: ${workspace}
|
||||
dataExtensions:
|
||||
- semmle/python/frameworks/**/*.model.yml
|
||||
- ext/*.model.yml
|
||||
warnOnImplicitThis: true
|
||||
|
||||
@@ -1,4 +1,3 @@
|
||||
| default |
|
||||
| remote |
|
||||
| request |
|
||||
| response |
|
||||
|
||||
Reference in New Issue
Block a user