Skip to content

test(COD-4237): no longer rely on SBOM eval for the integration tests#211

Draft
jeremydubreil wants to merge 1 commit intomainfrom
sast-only-integration-test
Draft

test(COD-4237): no longer rely on SBOM eval for the integration tests#211
jeremydubreil wants to merge 1 commit intomainfrom
sast-only-integration-test

Conversation

@jeremydubreil
Copy link
Contributor

No description provided.

@lacework-code-security
Copy link

(Audit Mode) sca found potential 1 new issues
  • string-concat-in-sql-command-csharp (sample-repo/Program.cs: sample-repo/proj.csproj)
    More detailsDetected string concatenation in SQL command, which is a bad practice and may allow SQL injection attacks. Instead, consider using parameterized queries.
    [HttpPost]
    static void httpPostSourceToSqlSink(string inputParameter)
    {
        string query = "SELECT * FROM " + inputParameter;
        using var _ = new SqlCommand(query);
    }
}

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant