Rasmus Wriedt Larsen 56c85ffe54 Python: Fixup threat-models for os.environ.get() ...

Since using `.DictionaryElementAny` doesn't actually do a store on the
source, (so we can later follow any dict read-steps).

I added the ensure_tainted steps to highlight that the result of the
WHOLE expression ends up "tainted", and that we don't just mark
`os.environ` as the source without further flow.

2024-09-10 14:32:36 +02:00

..

.vscode

Python: add debug based on location snippet

2022-10-20 21:20:24 +02:00

config/suites/lgtm

Python: move AlertSuppression.ql

2022-12-19 12:39:01 +01:00

downgrades

Upgrade rules_pkg to 0.10.1.

2024-04-16 16:29:56 +02:00

extractor

Python: Downgrade packaging for Python 3.7 support

2024-08-06 11:15:48 +02:00

old-change-notes

…

PoCs

spelling: retrieval

2022-10-13 11:21:09 -04:00

ql

Python: Fixup threat-models for os.environ.get()

2024-09-10 14:32:36 +02:00

tools

Python: Move to the new packaging rules.

2024-05-30 14:25:18 +02:00

BUILD.bazel

Python: Move to the new packaging rules.

2024-05-30 14:25:18 +02:00

codeql-extractor.yml

Python: Add codeql-extractor.yml

2024-03-19 17:11:40 +00:00