[Python][Questions] CodeQL security query is not able to detect CWE from given bad example in repository.
未關閉
question
- 主要語言
- CodeQL
- 星號
- 10.1k
- 分支
- 2.1k
- 平均合併
- 2 天 15 小時
- 30 天內合併 PR
- 141
描述
I have created codeql database of this python file [https://github.com/github/codeql/blob/main/python/ql/src/Security/CWE-022/examples/tarslip_bad.py](https://github.com/github/codeql/blob/main/python/ql/src/Security/CWE-022/examples/tarslip_bad.py).
But when I analyze database using [https://github.com/github/codeql/blob/main/python/ql/src/Security/CWE-022/TarSlip.ql](https://github.com/github/codeql/blob/main/python/ql/src/Security/CWE-022/TarSlip.ql) this query, I see nothing in query results.
Can someone help me why codeql query is not able to detect CWE-22 from the given example?
貢獻指南
評估
這個 Issue 還沒有評估資料。