Python: Replace type tracking with global data-flow

This takes care of most of the false negatives from the preceding
commit.

Additionally, we add models for some known wrappers of `socket.socket`
from the `gevent` and `eventlet` packages.
This commit is contained in:
Taus
2026-03-26 14:53:18 +00:00
parent 1ecd9e83b8
commit c439fc5d45
7 changed files with 44 additions and 43 deletions

View File

@@ -48,7 +48,7 @@ module KindValidation<KindValidationConfigSig Config> {
// CPP-only currently
"remote-sink",
// Python-only currently, but may be shared in the future
"prompt-injection"
"bind-socket-all-interfaces", "prompt-injection"
]
or
this.matches([