A
python-blocker-security-bundle
Read-only workflow bundle that runs all 31 Python blocker security mining codemods in one pass. Findings are recorded via JSSG metrics in the Codemod CLI run report.
alexbit-codemod2 executions
- Bundle
- mining
- metrics
- python
- security
- bundle
- blocker
Workflow default · 01. python:S2115 — A secure password should be used when connecting to a database
Workflow default · 30. python:S2755 — XML parsers should not be vulnerable to XXE attacks
Workflow default · 15. python:S5439 — HTML autoescape mechanism should not be globally disabled
Workflow default · 25. python:S6265 — S3 buckets should not grant access to all users or authenticated users
Workflow default · 04. python:S6270 — AWS resource-based policies should not grant public access
Workflow default · 24. python:S6302 — Policies should not grant all privileges
Workflow default · 03. python:S6333 — AWS API Gateway should require authentication
Workflow default · 26. python:S6418 — Secrets should not be hard-coded
Workflow default · 05. python:S6437 — Credentials should not be hard-coded
Workflow default · 14. python:S6779 — Flask secret keys should not be disclosed
Workflow default · 19. python:S6781 — JWT secret keys should not be disclosed
Workflow default · 21. python:S7625 — Long-term AWS access keys should not be used directly in code
Workflow default · 13. python:S8374 — Flask class-based view decorators should be applied using the decorat...
Workflow default · 12. python:S8375 — Flask preprocess_request() return values should be handled
Workflow default · 11. python:S8389 — FastAPI file upload endpoints should use Form() with Pydantic validat...
Workflow default · 29. python:S8392 — Web servers should not bind to all network interfaces
Workflow default · 27. pythonenterprise:S8435 — Sensitive data should not be passed in URL query parameters
Workflow default · 23. pythonsecurity:S2076 — OS commands should not be vulnerable to command injection attacks
Workflow default · 20. pythonsecurity:S2078 — LDAP queries should not be vulnerable to injection attacks
Workflow default · 18. pythonsecurity:S2083 — I/O function calls should not be vulnerable to path injection attacks
Workflow default · 31. pythonsecurity:S2091 — XPath expressions should not be vulnerable to injection attacks
Workflow default · 06. pythonsecurity:S3649 — Database queries should not be vulnerable to injection attacks
Workflow default · 09. pythonsecurity:S5131 — Endpoints should not be vulnerable to reflected cross-site scripting ...
Workflow default · 07. pythonsecurity:S5135 — Deserialization should not be vulnerable to injection attacks
Workflow default · 16. pythonsecurity:S5146 — HTTP request redirections should not be open to forging attacks
Workflow default · 22. pythonsecurity:S5147 — NoSQL operations should not be vulnerable to injection attacks
Workflow default · 08. pythonsecurity:S5334 — Dynamic code execution should not be vulnerable to injection attacks
Workflow default · 28. pythonsecurity:S5496 — Server-side templates should not be vulnerable to injection attacks
Workflow default · 10. pythonsecurity:S6096 — Extracting archives should not lead to zip slip vulnerabilities
Workflow default · 17. pythonsecurity:S6839 — HTTP response headers should not be vulnerable to response splitting ...
Workflow default · 02. pythonsecurity:S8701 — Agentic workflows should not be vulnerable to command injection attacks
Ready to evolve your codebase?
Build tailored, compiler-aware skills to assess, plan, and automate complex codebase changes.