hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-17 09:13:20 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
z80coder/query-pack-release-candidate-2
codeql/python/change-notes/2021-02-23-port-insecure-default-protocol.md
yoff d5b304ce75 Update python/change-notes/2021-02-23-port-insecure-default-protocol.md 
Co-authored-by: Felicity Chapman <felicitymay@github.com>
2021-03-09 13:19:48 +01:00

465 B
Raw Permalink Blame History

lgtm,codescanning

  • Updated the query that detects insecure SSL/TLS protocol creation from default values (py/insecure-default-protocol) to use the new API graphs. The query also no longer reports use of the default value for constructing ssl.SSLContext, since that can still be secure, either through manipulation of the options field or the minimum_version field. If the usage is not secure, this should be reported by the py/insecure-protocol query.