python: Add provenance column to MaD #15730
Conversation
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
| @@ -8,13 +8,13 @@ | |||
| * | |||
| * The kind `remote` represents a general remote flow source. | |||
| */ | |||
| extensible predicate sourceModel(string type, string path, string kind); | |||
| extensible predicate sourceModel(string type, string path, string kind, string provenance); | |||
Check warning
Code scanning / CodeQL
Missing QLDoc for parameter Warning
| @@ -23,21 +23,23 @@ | |||
| * `kind` should be either `value` or `taint`, for value-preserving or taint-preserving steps, | |||
| * respectively. | |||
| */ | |||
| extensible predicate summaryModel(string type, string path, string input, string output, string kind); | |||
| extensible predicate summaryModel( | |||
Check warning
Code scanning / CodeQL
Missing QLDoc for parameter Warning
| @@ -8,13 +8,13 @@ | |||
| * | |||
| * The kind `remote` represents a general remote flow source. | |||
| */ | |||
| extensible predicate sourceModel(string type, string path, string kind); | |||
| extensible predicate sourceModel(string type, string path, string kind, string provenance); | |||
Check warning
Code scanning / CodeQL
Missing QLDoc for parameter Warning
| @@ -23,21 +23,23 @@ | |||
| * `kind` should be either `value` or `taint`, for value-preserving or taint-preserving steps, | |||
| * respectively. | |||
| */ | |||
| extensible predicate summaryModel(string type, string path, string input, string output, string kind); | |||
| extensible predicate summaryModel( | |||
Check warning
Code scanning / CodeQL
Missing QLDoc for parameter Warning
| @@ -8,13 +8,13 @@ | |||
| * | |||
| * The kind `remote` represents a general remote flow source. | |||
| */ | |||
| extensible predicate sourceModel(string type, string path, string kind); | |||
| extensible predicate sourceModel(string type, string path, string kind, string provenance); | |||
Check warning
Code scanning / CodeQL
Missing QLDoc for parameter Warning
| @@ -23,21 +23,23 @@ | |||
| * `kind` should be either `value` or `taint`, for value-preserving or taint-preserving steps, | |||
| * respectively. | |||
| */ | |||
| extensible predicate summaryModel(string type, string path, string input, string output, string kind); | |||
| extensible predicate summaryModel( | |||
Check warning
Code scanning / CodeQL
Missing QLDoc for parameter Warning
ApiGraphModels.qll and ApiGraphModelsExtensions.qll back in sync with python
yoff
force-pushed
the
python/add-mad-provenance-column
branch
from
9364a23 to
e0f2547
Compare
In preparation for a future where models are generated from the ModelEditor and via AI (as well as the bespoke internal tools we are already building..).
I would like to know if all the rows in
python/ql/lib/semmle/python/frameworks/data/internal/subclass-capture/ALL.model.ymlshould be labeled asmanual.TODO: Add preference for manual models.