Python: False positive: Tuple Destructuring
未關閉
false-positive
- 主要語言
- CodeQL
- 星號
- 10.1k
- 分支
- 2.1k
- 平均合併
- 2 天 15 小時
- 30 天內合併 PR
- 141
描述
**Description of the false positive**
CodeQL incorrectly identifies dataflow occurring from a constant value when a tuple is being destructured.
**Code samples or links to source code**
Here's it's very clear that `status` will always be `200` on this data flow path, but CodeQL incorrectly believes there is dataflow from the `res.json()` to the `status` variable.
https://github.com/Chainguard-Wolfi-Bites-Back/istio__istio/security/code-scanning/5
貢獻指南
評估
這個 Issue 還沒有評估資料。