| route-pattern | /:user_id/:repository/pull/:id/files(.:format) |
| route-controller | pull_requests |
| route-action | files |
| fetch-nonce | v2:d6711b84-72c3-97f1-856a-0164e6cd7338 |
| current-catalog-service-hash | ae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b |
| request-id | A8EE:296F05:B765D9:F7E16F:6A4D54F6 |
| html-safe-nonce | ee1e6c1dd8b20cf6c1ff1bd787fcfc361f1e2aa8b423a8ed134b4509e0fef20b |
| visitor-payload | eyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJBOEVFOjI5NkYwNTpCNzY1RDk6RjdFMTZGOjZBNEQ1NEY2IiwidmlzaXRvcl9pZCI6IjUwODk5NTc2MjY3ODQ4NjM0NzgiLCJyZWdpb25fZWRnZSI6ImlhZCIsInJlZ2lvbl9yZW5kZXIiOiJpYWQifQ== |
| visitor-hmac | 94584ed1dc5e9698551f13c48bbdcaf4991139d3670fbff18881dfebe161b6e5 |
| hovercard-subject-tag | pull_request:615659690 |
| github-keyboard-shortcuts | repository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot |
| google-site-verification | Apib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I |
| octolytics-url | https://collector.github.com/github/collect |
| analytics-location | ///pull_requests/show/files |
| fb:app_id | 1401488693436528 |
| apple-itunes-app | app-id=1477376905, app-argument=https://github.com/github/codeql/pull/5680/files |
| twitter:image | https://avatars.githubusercontent.com/u/52643283?s=400&v=4 |
| twitter:card | summary_large_image |
| og:image | https://avatars.githubusercontent.com/u/52643283?s=400&v=4 |
| og:image:alt | This PR is meant to add a module for dealing with SqlAlchemy in Python CodeQL queries. For context, this will be used in an upcoming CodeQL security query so I decided to go ahead and submit this P... |
| og:site_name | GitHub |
| og:type | object |
| hostname | github.com |
| expected-hostname | github.com |
| None | 92571a8944142227b7e19cd10918b1ddd06e5066c1ad5bc7e4769cf6140a87e6 |
| turbo-cache-control | no-preview |
| diff-view | unified |
| go-import | github.com/github/codeql git https://github.com/github/codeql.git |
| octolytics-dimension-user_id | 9919 |
| octolytics-dimension-user_login | github |
| octolytics-dimension-repository_id | 143040428 |
| octolytics-dimension-repository_nwo | github/codeql |
| octolytics-dimension-repository_public | true |
| octolytics-dimension-repository_is_fork | false |
| octolytics-dimension-repository_network_root_id | 143040428 |
| octolytics-dimension-repository_network_root_nwo | github/codeql |
| turbo-body-classes | logged-out env-production page-responsive full-width |
| disable-turbo | true |
| browser-stats-url | https://api.github.com/_private/browser/stats |
| browser-errors-url | https://api.github.com/_private/browser/errors |
| release | 56fc8347865a14e2ec811533d68f929cf4e0ec19 |
| ui-target | full |
| theme-color | #1e2327 |
| color-scheme | light dark |
| Skip to content | https://github.com/github/codeql/pull/5680/files#start-of-content |
|
| https://github.com/ |
|
Sign in
| https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F5680%2Ffiles |
| GitHub CopilotWrite better code with AI | https://github.com/features/copilot |
| GitHub Copilot appDirect agents from issue to merge | https://github.com/features/ai/github-app |
| MCP RegistryNewIntegrate external tools | https://github.com/mcp |
| ActionsAutomate any workflow | https://github.com/features/actions |
| CodespacesInstant dev environments | https://github.com/features/codespaces |
| IssuesPlan and track work | https://github.com/features/issues |
| Code ReviewManage code changes | https://github.com/features/code-review |
| GitHub Advanced SecurityFind and fix vulnerabilities | https://github.com/security/advanced-security |
| Code securitySecure your code as you build | https://github.com/security/advanced-security/code-security |
| Secret protectionStop leaks before they start | https://github.com/security/advanced-security/secret-protection |
| Why GitHub | https://github.com/why-github |
| Documentation | https://docs.github.com |
| Blog | https://github.blog |
| Changelog | https://github.blog/changelog |
| Marketplace | https://github.com/marketplace |
| View all features | https://github.com/features |
| Enterprises | https://github.com/enterprise |
| Small and medium teams | https://github.com/team |
| Startups | https://github.com/enterprise/startups |
| Nonprofits | https://github.com/solutions/industry/nonprofits |
| App Modernization | https://github.com/solutions/use-case/app-modernization |
| DevSecOps | https://github.com/solutions/use-case/devsecops |
| DevOps | https://github.com/solutions/use-case/devops |
| CI/CD | https://github.com/solutions/use-case/ci-cd |
| View all use cases | https://github.com/solutions/use-case |
| Healthcare | https://github.com/solutions/industry/healthcare |
| Financial services | https://github.com/solutions/industry/financial-services |
| Manufacturing | https://github.com/solutions/industry/manufacturing |
| Government | https://github.com/solutions/industry/government |
| View all industries | https://github.com/solutions/industry |
| View all solutions | https://github.com/solutions |
| AI | https://github.com/resources/articles?topic=ai |
| Software Development | https://github.com/resources/articles?topic=software-development |
| DevOps | https://github.com/resources/articles?topic=devops |
| Security | https://github.com/resources/articles?topic=security |
| View all topics | https://github.com/resources/articles |
| Customer stories | https://github.com/customer-stories |
| Events & webinars | https://github.com/resources/events |
| Ebooks & reports | https://github.com/resources/whitepapers |
| Business insights | https://github.com/solutions/executive-insights |
| GitHub Skills | https://skills.github.com |
| Documentation | https://docs.github.com |
| Customer support | https://support.github.com |
| Community forum | https://github.com/orgs/community/discussions |
| Trust center | https://github.com/trust-center |
| Partners | https://github.com/partners |
| View all resources | https://github.com/resources |
| GitHub SponsorsFund open source developers | https://github.com/sponsors |
| Security Lab | https://securitylab.github.com |
| Maintainer Community | https://maintainers.github.com |
| Accelerator | https://github.com/accelerator |
| GitHub Stars | https://stars.github.com |
| Archive Program | https://archiveprogram.github.com |
| Topics | https://github.com/topics |
| Trending | https://github.com/trending |
| Collections | https://github.com/collections |
| Enterprise platformAI-powered developer platform | https://github.com/enterprise |
| GitHub Advanced SecurityEnterprise-grade security features | https://github.com/security/advanced-security |
| Copilot for BusinessEnterprise-grade AI features | https://github.com/features/copilot/copilot-business |
| Premium SupportEnterprise-grade 24/7 support | https://github.com/premium-support |
| Pricing | https://github.com/pricing |
| Search syntax tips | https://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax |
| documentation | https://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax |
|
Sign in
| https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F5680%2Ffiles |
|
Sign up
| https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fpull_requests%2Fshow%2Ffiles&source=header-repo&source_repo=github%2Fcodeql |
| Reload | https://github.com/github/codeql/pull/5680/files |
| Reload | https://github.com/github/codeql/pull/5680/files |
| Reload | https://github.com/github/codeql/pull/5680/files |
| Please reload this page | https://github.com/github/codeql/pull/5680/files |
|
github
| https://github.com/github |
| codeql | https://github.com/github/codeql |
|
Notifications
| https://github.com/login?return_to=%2Fgithub%2Fcodeql |
|
Fork
2k
| https://github.com/login?return_to=%2Fgithub%2Fcodeql |
|
Star
9.8k
| https://github.com/login?return_to=%2Fgithub%2Fcodeql |
|
Code
| https://github.com/github/codeql |
|
Issues
988
| https://github.com/github/codeql/issues |
|
Pull requests
424
| https://github.com/github/codeql/pulls |
|
Discussions
| https://github.com/github/codeql/discussions |
|
Actions
| https://github.com/github/codeql/actions |
|
Projects
| https://github.com/github/codeql/projects |
|
Models
| https://github.com/github/codeql/models |
|
Security and quality
0
| https://github.com/github/codeql/security |
|
Insights
| https://github.com/github/codeql/pulse |
|
Code
| https://github.com/github/codeql |
|
Issues
| https://github.com/github/codeql/issues |
|
Pull requests
| https://github.com/github/codeql/pulls |
|
Discussions
| https://github.com/github/codeql/discussions |
|
Actions
| https://github.com/github/codeql/actions |
|
Projects
| https://github.com/github/codeql/projects |
|
Models
| https://github.com/github/codeql/models |
|
Security and quality
| https://github.com/github/codeql/security |
|
Insights
| https://github.com/github/codeql/pulse |
| Sign up for GitHub
| https://github.com/signup?return_to=%2Fgithub%2Fcodeql%2Fissues%2Fnew%2Fchoose |
| terms of service | https://docs.github.com/terms |
| privacy statement | https://docs.github.com/privacy |
| Sign in | https://github.com/login?return_to=%2Fgithub%2Fcodeql%2Fissues%2Fnew%2Fchoose |
| RasmusWL | https://github.com/RasmusWL |
| github:main | https://github.com/github/codeql/tree/main |
| mrthankyou:python-use-sqlalchemy | https://github.com/mrthankyou/codeql/tree/python-use-sqlalchemy |
|
Conversation
22
| https://github.com/github/codeql/pull/5680 |
|
Findings
| https://github.com/github/codeql/pull/5680/findings |
|
Commits
13
| https://github.com/github/codeql/pull/5680/commits |
|
Checks
0
| https://github.com/github/codeql/pull/5680/checks |
|
Files changed
| https://github.com/github/codeql/pull/5680/files |
| Please reload this page | https://github.com/github/codeql/pull/5680/files |
|
Python: Add SqlAlchemy model
| https://github.com/github/codeql/pull/5680/files#top |
|
Show all changes
13 commits
| https://github.com/github/codeql/pull/5680/files |
|
f1e71e2
Add SqlAlchemy module
mrthankyou Apr 15, 2021
| https://github.com/github/codeql/pull/5680/commits/f1e71e21ed543e727f403dd7c904e31a4aba1f19 |
|
a854fb8
Add documentation and refactor code
mrthankyou Apr 15, 2021
| https://github.com/github/codeql/pull/5680/commits/a854fb8f8b16a2af5a548465a5e4d551f135a9ba |
|
c5fbbc0
Refactor SqlAlchemy model
mrthankyou Apr 19, 2021
| https://github.com/github/codeql/pull/5680/commits/c5fbbc055179e4459dd327257fa7c827ed92f5ba |
|
3ace495
Add tests for SqlAlchemy modeling library
mrthankyou May 10, 2021
| https://github.com/github/codeql/pull/5680/commits/3ace49549a94b34634dcadc8932951c7e944129e |
|
eac1c5d
Python: Fix concepts-tests for SQLAlchemy
RasmusWL Jun 29, 2021
| https://github.com/github/codeql/pull/5680/commits/eac1c5d10982f5c72a57e742dacb4327af0153a6 |
|
684f51a
Merge branch 'main' into python-use-sqlalchemy
RasmusWL Jun 29, 2021
| https://github.com/github/codeql/pull/5680/commits/684f51ae5fc90cd59dca8af434a90df37eb36667 |
|
cb11239
Python: Fixup after merging main
RasmusWL Jun 29, 2021
| https://github.com/github/codeql/pull/5680/commits/cb112395f84c16bf8e4c1399b4190da744b7ff83 |
|
ef48734
Python: Add taint-tests for SQLAlchemy
RasmusWL Jun 29, 2021
| https://github.com/github/codeql/pull/5680/commits/ef48734206153930163d3da7a27f6cec9f3cd80d |
|
a5a7f3e
Python: Add taint-step for `sqlalchemy.text`
RasmusWL Jun 29, 2021
| https://github.com/github/codeql/pull/5680/commits/a5a7f3e38ac38ef221697e0f541caaffeda0b144 |
|
2a65917
Merge pull request #1 from RasmusWL/python-use-sqlalchemy
mrthankyou Jun 29, 2021
| https://github.com/github/codeql/pull/5680/commits/2a65917bb5cccbdd8a42d0448a713b51d9f64854 |
|
986f2f4
Add SQLEscape module
mrthankyou Jun 29, 2021
| https://github.com/github/codeql/pull/5680/commits/986f2f43028bd319ad9f6374deb9062560a14798 |
|
0be2c6b
Add SQLEscapySanitizerCall class
mrthankyou Jun 29, 2021
| https://github.com/github/codeql/pull/5680/commits/0be2c6b7657bc1930daf5b3b86545b864dd0e8e2 |
|
9e01338
Query only vulnerable methods
mrthankyou Jul 18, 2021
| https://github.com/github/codeql/pull/5680/commits/9e01338500b703adf3d9084b0e9d22623ef8643c |
|
Clear filters
| https://github.com/github/codeql/pull/5680/files |
| Please reload this page | https://github.com/github/codeql/pull/5680/files |
| Please reload this page | https://github.com/github/codeql/pull/5680/files |
|
Concepts.qll
| https://github.com/github/codeql/pull/5680/files#diff-07631b7f3489bbd6603ecbc9149f5919406181361b1bd04a53e048f531a4986a |
|
SqlAlchemy.qll
| https://github.com/github/codeql/pull/5680/files#diff-96976daafec69640263410961f501f25450caf3f14c3a0c27049a45df46ac17b |
|
ConceptsTest.expected
| https://github.com/github/codeql/pull/5680/files#diff-1bb4e6013de1b86edc5a5eec0b4d38c710943c08fc2c33a2280873c6500a91bb |
|
ConceptsTest.ql
| https://github.com/github/codeql/pull/5680/files#diff-7e33258dd4fdc1d909bf159ac8c95ae563461af6b15f1382dd355824529017b8 |
|
InlineTaintTest.expected
| https://github.com/github/codeql/pull/5680/files#diff-a26c8c1548575a4f3077ddd8e30ccc4de32aa664c5c0956b3982d19fd73359da |
|
InlineTaintTest.ql
| https://github.com/github/codeql/pull/5680/files#diff-3f2480f326955602b4d4ba37740af620a74174e40b19a7923e60fac42592ee43 |
|
SqlExecution.py
| https://github.com/github/codeql/pull/5680/files#diff-0f85880cfbfd5adea5c38284361e885803c94951709351b6d7761a9639a8172e |
|
taint_test.py
| https://github.com/github/codeql/pull/5680/files#diff-4bc0e52905aed70f6104afeceaa44a9ea90a60335a104538d2aaf40c3a8ca907 |
|
| https://github.com/github/codeql/blob/main/CODEOWNERS#L19 |
| python/ql/src/experimental/semmle/python/Concepts.qll | https://github.com/github/codeql/pull/5680/files#diff-07631b7f3489bbd6603ecbc9149f5919406181361b1bd04a53e048f531a4986a |
|
View file
| https://github.com/mrthankyou/codeql/blob/9e01338500b703adf3d9084b0e9d22623ef8643c/python/ql/src/experimental/semmle/python/Concepts.qll |
|
Open in desktop
| https://desktop.github.com |
| https://github.co/hiddenchars |
| https://github.com/github/codeql/pull/5680/{{ revealButtonHref }} |
|
| https://github.com/github/codeql/pull/5680/files#diff-07631b7f3489bbd6603ecbc9149f5919406181361b1bd04a53e048f531a4986a |
|
| https://github.com/github/codeql/blob/main/CODEOWNERS#L19 |
| python/ql/src/experimental/semmle/python/frameworks/SqlAlchemy.qll | https://github.com/github/codeql/pull/5680/files#diff-96976daafec69640263410961f501f25450caf3f14c3a0c27049a45df46ac17b |
|
View file
| https://github.com/mrthankyou/codeql/blob/9e01338500b703adf3d9084b0e9d22623ef8643c/python/ql/src/experimental/semmle/python/frameworks/SqlAlchemy.qll |
|
Open in desktop
| https://desktop.github.com |
| https://github.co/hiddenchars |
| https://github.com/github/codeql/pull/5680/{{ revealButtonHref }} |
| mrthankyou | https://github.com/mrthankyou |
| Jun 29, 2021 | https://github.com/github/codeql/pull/5680/files#r661003933 |
| Learn more | https://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment |
| Please reload this page | https://github.com/github/codeql/pull/5680/files |
| RasmusWL | https://github.com/RasmusWL |
| Jun 30, 2021 | https://github.com/github/codeql/pull/5680/files#r661723672 |
| Learn more | https://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment |
| https://pypi.org/project/SQLAlchemy/#history | https://pypi.org/project/SQLAlchemy/#history |
| Please reload this page | https://github.com/github/codeql/pull/5680/files |
| mrthankyou | https://github.com/mrthankyou |
| Jun 29, 2021 | https://github.com/github/codeql/pull/5680/files#r661003340 |
| Learn more | https://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment |
| Please reload this page | https://github.com/github/codeql/pull/5680/files |
| Please reload this page | https://github.com/github/codeql/pull/5680/files |
|
| https://github.com/github/codeql/blob/main/CODEOWNERS#L19 |
| python/ql/test/experimental/library-tests/frameworks/sqlalchemy/ConceptsTest.expected | https://github.com/github/codeql/pull/5680/files#diff-1bb4e6013de1b86edc5a5eec0b4d38c710943c08fc2c33a2280873c6500a91bb |
|
View file
| https://github.com/mrthankyou/codeql/blob/9e01338500b703adf3d9084b0e9d22623ef8643c/python/ql/test/experimental/library-tests/frameworks/sqlalchemy/ConceptsTest.expected |
|
Open in desktop
| https://desktop.github.com |
|
| https://github.com/github/codeql/blob/main/CODEOWNERS#L19 |
| python/ql/test/experimental/library-tests/frameworks/sqlalchemy/ConceptsTest.ql | https://github.com/github/codeql/pull/5680/files#diff-7e33258dd4fdc1d909bf159ac8c95ae563461af6b15f1382dd355824529017b8 |
|
View file
| https://github.com/mrthankyou/codeql/blob/9e01338500b703adf3d9084b0e9d22623ef8643c/python/ql/test/experimental/library-tests/frameworks/sqlalchemy/ConceptsTest.ql |
|
Open in desktop
| https://desktop.github.com |
| https://github.co/hiddenchars |
| https://github.com/github/codeql/pull/5680/{{ revealButtonHref }} |
|
| https://github.com/github/codeql/blob/main/CODEOWNERS#L19 |
| python/ql/test/experimental/library-tests/frameworks/sqlalchemy/InlineTaintTest.expected | https://github.com/github/codeql/pull/5680/files#diff-a26c8c1548575a4f3077ddd8e30ccc4de32aa664c5c0956b3982d19fd73359da |
|
View file
| https://github.com/mrthankyou/codeql/blob/9e01338500b703adf3d9084b0e9d22623ef8643c/python/ql/test/experimental/library-tests/frameworks/sqlalchemy/InlineTaintTest.expected |
|
Open in desktop
| https://desktop.github.com |
| https://github.co/hiddenchars |
| https://github.com/github/codeql/pull/5680/{{ revealButtonHref }} |
|
| https://github.com/github/codeql/blob/main/CODEOWNERS#L19 |
| python/ql/test/experimental/library-tests/frameworks/sqlalchemy/InlineTaintTest.ql | https://github.com/github/codeql/pull/5680/files#diff-3f2480f326955602b4d4ba37740af620a74174e40b19a7923e60fac42592ee43 |
|
View file
| https://github.com/mrthankyou/codeql/blob/9e01338500b703adf3d9084b0e9d22623ef8643c/python/ql/test/experimental/library-tests/frameworks/sqlalchemy/InlineTaintTest.ql |
|
Open in desktop
| https://desktop.github.com |
| https://github.co/hiddenchars |
| https://github.com/github/codeql/pull/5680/{{ revealButtonHref }} |
|
| https://github.com/github/codeql/blob/main/CODEOWNERS#L19 |
| python/ql/test/experimental/library-tests/frameworks/sqlalchemy/SqlExecution.py | https://github.com/github/codeql/pull/5680/files#diff-0f85880cfbfd5adea5c38284361e885803c94951709351b6d7761a9639a8172e |
|
View file
| https://github.com/mrthankyou/codeql/blob/9e01338500b703adf3d9084b0e9d22623ef8643c/python/ql/test/experimental/library-tests/frameworks/sqlalchemy/SqlExecution.py |
|
Open in desktop
| https://desktop.github.com |
| https://github.co/hiddenchars |
| https://github.com/github/codeql/pull/5680/{{ revealButtonHref }} |
|
| https://github.com/github/codeql/blob/main/CODEOWNERS#L19 |
| python/ql/test/experimental/library-tests/frameworks/sqlalchemy/taint_test.py | https://github.com/github/codeql/pull/5680/files#diff-4bc0e52905aed70f6104afeceaa44a9ea90a60335a104538d2aaf40c3a8ca907 |
|
View file
| https://github.com/mrthankyou/codeql/blob/9e01338500b703adf3d9084b0e9d22623ef8643c/python/ql/test/experimental/library-tests/frameworks/sqlalchemy/taint_test.py |
|
Open in desktop
| https://desktop.github.com |
| https://github.co/hiddenchars |
| https://github.com/github/codeql/pull/5680/{{ revealButtonHref }} |
|
| https://github.com |
| Terms | https://docs.github.com/site-policy/github-terms/github-terms-of-service |
| Privacy | https://docs.github.com/site-policy/privacy-policies/github-privacy-statement |
| Security | https://github.com/security |
| Status | https://www.githubstatus.com/ |
| Community | https://github.community/ |
| Docs | https://docs.github.com/ |
| Contact | https://support.github.com?tags=dotcom-footer |