mirror of
https://github.com/github/codeql.git
synced 2026-04-30 19:26:02 +02:00
Add change note for 1.20
This commit is contained in:
29
change-notes/1.20/analysis-python.md
Normal file
29
change-notes/1.20/analysis-python.md
Normal file
@@ -0,0 +1,29 @@
|
||||
# Improvements to Python analysis
|
||||
|
||||
|
||||
## General improvements
|
||||
|
||||
> Changes that affect alerts in many files or from many queries
|
||||
> For example, changes to file classification
|
||||
## New queries
|
||||
|
||||
| **Query** | **Tags** | **Purpose** |
|
||||
|-----------------------------|-----------|--------------------------------------------------------------------|
|
||||
| Default version of SSL/TLS may be insecure (`py/insecure-default-protocol`) | security, external/cwe/cwe-327 | Results are shown on LGTM by default. |
|
||||
| Use of insecure SSL/TLS version (`py/insecure-protocol`) | security, external/cwe/cwe-327 | Results are shown on LGTM by default. |
|
||||
|
||||
## Changes to existing queries
|
||||
|
||||
All taint-tracking queries now support visualization of paths in QL for Eclipse.
|
||||
Most security alerts are now visible on LGTM by default.
|
||||
|
||||
| **Query** | **Expected impact** | **Change** |
|
||||
|----------------------------|------------------------|------------------------------------------------------------------|
|
||||
|
||||
## Changes to code extraction
|
||||
|
||||
* *Series of bullet points*
|
||||
|
||||
## Changes to QL libraries
|
||||
|
||||
* *Series of bullet points*
|
||||
Reference in New Issue
Block a user