search

securesauce / precli

Precaution CLI - command line static application security testing tool
https://precli.readthedocs.io/
Other
22 stars 3 forks source link

False positive if parameter is zipped dictionary #398

Open ericwb opened 7 months ago

ericwb commented 7 months ago

Describe the bug For some rules that check kwargs, if a zipped dict is passed as the argument, the rule fails to understand this.

For example:

SMTP(**smtp_kwargs)

To Reproduce Steps to reproduce the behavior:

  1. Create an example where the argument is a zipped dict
  2. Run rule particular to that example

Expected behavior Rules that check kwargs should not result in false positives or false negatives.

Version

precli 0.4.3.dev6
  python version = 3.12.1 (main, Dec 12 2023, 13:19:17) [Clang 15.0.0 (clang-1500.0.40.1)]

Additional context https://github.com/apache/airflow/blob/main/airflow/providers/smtp/hooks/smtp.py#L135