False Negative with https://github.com/robmoffat/codeql-vuln-blog

**Description of the issue**

I forked the repo: https://github.com/robmoffat/codeql-vuln-blog

and then added the CodeQL GH action, but no vulnerabilities are reported.

Reviewing the python code in the repo, it seems ripe with SQL injection possibilities.

What am I doing wrong?

thanks

Start by reproducing the report in the forked robmoffat/codeql-vuln-blog repository with the added CodeQL GitHub Action. Inspect the action configuration and the Python code described as containing SQL-injection possibilities, then compare the analysis results with the expected findings. Done means explaining why no vulnerabilities are reported and identifying the required configuration or query change.

由索引模型根據 Issue 內容生成。