pythonenterprise-s8435-sensitive-url-query-mining

Read-only mining codemod for pythonenterprise:S8435: Sensitive data should not be passed in URL query parameters.

Emits python_security_finding metric rows with blocking severity. Source files are never modified.

Rule

• ID: pythonenterprise:S8435
• Severity: blocking
• Remediation: Pass sensitive values in request bodies or headers instead of query strings

Usage

bash
Copy
pnpm dlx codemod@latest workflow run -w codemods/python-security-mining/pythonenterprise-s8435-sensitive-url-query-mining/workflow.yaml --target /path/to/python/project

Development

bash
Copy
pnpm --filter ./codemods/python-security-mining/pythonenterprise-s8435-sensitive-url-query-mining test