codeql

mirror of https://github.com/github/codeql.git synced 2026-05-14 19:29:28 +02:00

Files

Taus 6b64443c49 Python: Port cyclic import queries

The new CyclicImports.qll is a fairly straight port of Cyclic.qll, with
the main changes being:

- We now use Module instead of ModuleValue everywhere
- We use getModuleReference instead of pointsTo
- is_import_time was replaced with a use of `ImportTimeScope`

The predicate that changed the most is `stmt_imports`, which in the
original just did `s.getASubExpression().pointsTo(result)`. The new
version has three branches, one for each kind of import, and with
special handling of imports from within a submodule (which is not
something that should be flagged).

No test changes.

2026-03-09 17:22:07 +00:00