github / github/codeql

Python: False positive: Tuple Destructuring

Abierto
#17,008 2 comentarios 0 reacciones 0 asignados Ver en GitHub
false-positive
Lenguaje dominante
CodeQL
Estrellas
10.1k
Forks
2.1k
Merge medio
2 d 15 h
PR fusionados (30 d)
141

Descripción

**Description of the false positive**

CodeQL incorrectly identifies dataflow occurring from a constant value when a tuple is being destructured.

**Code samples or links to source code**
![Screenshot 2024-07-17 at 1 17 28 PM](https://github.com/user-attachments/assets/fcd5cfd8-4a3d-4f09-b9a3-0af5a802b67b)

Here's it's very clear that `status` will always be `200` on this data flow path, but CodeQL incorrectly believes there is dataflow from the `res.json()` to the `status` variable.

https://github.com/Chainguard-Wolfi-Bites-Back/istio__istio/security/code-scanning/5

Guía de contribución

Abrir la guía de contribución

Evaluación

Este issue todavía no se ha evaluado.

Recibe los nuevos issues en tu correo

Un resumen breve de issues de GitHub para principiantes.