diff --git a/python/ql/lib/ext/default-threat-models-fixup.model.yml b/python/ql/lib/ext/default-threat-models-fixup.model.yml new file mode 100644 index 00000000000..cc1cb20517e --- /dev/null +++ b/python/ql/lib/ext/default-threat-models-fixup.model.yml @@ -0,0 +1,8 @@ +extensions: + - addsTo: + pack: codeql/threat-models + extensible: threatModelConfiguration + data: + # Since responses are enabled by default in the shared threat-models configuration, + # we need to disable it here to keep existing behavior for the python analysis. + - ["response", false, -2147483647] diff --git a/python/ql/lib/qlpack.yml b/python/ql/lib/qlpack.yml index 2abc452ef50..36b1f7242be 100644 --- a/python/ql/lib/qlpack.yml +++ b/python/ql/lib/qlpack.yml @@ -16,4 +16,5 @@ dependencies: codeql/yaml: ${workspace} dataExtensions: - semmle/python/frameworks/**/*.model.yml + - ext/*.model.yml warnOnImplicitThis: true diff --git a/python/ql/test/library-tests/threat-models/default/ActiveKinds.expected b/python/ql/test/library-tests/threat-models/default/ActiveKinds.expected index c471a7cc912..892f0fa5f6c 100644 --- a/python/ql/test/library-tests/threat-models/default/ActiveKinds.expected +++ b/python/ql/test/library-tests/threat-models/default/ActiveKinds.expected @@ -1,4 +1,3 @@ | default | | remote | | request | -| response |