Blabla #10
Blabla #10
Conversation
![orca-security-us[bot]](https://avatars.githubusercontent.com/in/276250?s=60&v=4){kind=small}
There was a problem hiding this comment.
Orca Security Scan Summary
| Status | Check | Issues by priority | |
|---|---|---|---|
 Passed |
Infrastructure as Code |  0  0  0  0 |
View in Orca |
| Passed |
Vulnerabilities | 0 0 0 0 |
View in Orca |
| Passed |
Secrets | 0 0 0 0 |
View in Orca |
|
![jit-ci[bot]](https://avatars.githubusercontent.com/in/142441?s=60&v=4){kind=small}
| @@ -156,7 +156,9 @@ | |||
| print(sql_query) | |||
| try: | |||
| print("\nin try\n") | |||
| val="" | |||
| val=login.objects.raw(sql_query) | |||
There was a problem hiding this comment.
Security control: Static Code Analysis Python Semgrep
Type: Gitlab.Bandit.B611
Description: You should be very careful whenever you write raw SQL. Consider using Django ORM before raw SQL. See https://docs.djangoproject.com/en/3.0/topics/db/sql/#passing-parameters-into-raw
Severity: HIGH
Jit Bot commands and options (e.g., ignore issue)
You can trigger Jit actions by commenting on this PR review:
#jit_ignore_fpIgnore and mark this specific single instance of finding as “False Positive”#jit_ignore_acceptIgnore and mark this specific single instance of finding as “Accept Risk”#jit_undo_ignoreUndo ignore command
| val="" | ||
| val=login.objects.raw(sql_query) | ||
| val=login.objects.raw(sql_query) | ||
| val=login.objects.raw(sql_query) |
There was a problem hiding this comment.
Security control: Static Code Analysis Python Semgrep
Type: Gitlab.Bandit.B611
Description: You should be very careful whenever you write raw SQL. Consider using Django ORM before raw SQL. See https://docs.djangoproject.com/en/3.0/topics/db/sql/#passing-parameters-into-raw
Severity: HIGH
Jit Bot commands and options (e.g., ignore issue)
You can trigger Jit actions by commenting on this PR review:
#jit_ignore_fpIgnore and mark this specific single instance of finding as “False Positive”#jit_ignore_acceptIgnore and mark this specific single instance of finding as “Accept Risk”#jit_undo_ignoreUndo ignore command
| @@ -156,7 +156,9 @@ | |||
| print(sql_query) | |||
| try: | |||
| print("\nin try\n") | |||
| val="" | |||
| val=login.objects.raw(sql_query) | |||
| val=login.objects.raw(sql_query) | |||
There was a problem hiding this comment.
Security control: Static Code Analysis Python Semgrep
Type: Gitlab.Bandit.B611
Description: You should be very careful whenever you write raw SQL. Consider using Django ORM before raw SQL. See https://docs.djangoproject.com/en/3.0/topics/db/sql/#passing-parameters-into-raw
Severity: HIGH
Jit Bot commands and options (e.g., ignore issue)
You can trigger Jit actions by commenting on this PR review:
#jit_ignore_fpIgnore and mark this specific single instance of finding as “False Positive”#jit_ignore_acceptIgnore and mark this specific single instance of finding as “Accept Risk”#jit_undo_ignoreUndo ignore command
No description provided.