Skip to content

Hardening suggestions for codemodder-python / sonar-timezone - #818

Merged
clavedeluna merged 2 commits into
sonar-timezonefrom
pixeebot/sonar-timezone
Aug 30, 2024
Merged

clavedeluna merged 2 commits into
sonar-timezonefrom
pixeebot/sonar-timezone

Conversation

@pixeebot

@pixeebot pixeebot Bot commented Aug 30, 2024

Copy link
Copy Markdown
Contributor

I've reviewed the recently opened PR (802 - Timezone find and fix and sonar codemod) and have identified some area(s) that could benefit from additional hardening measures.

These changes should help prevent potential security vulnerabilities and improve overall code quality.

Thank you for your consideration!
🧚🤖 Powered by Pixeebot

Feedback | Community | Docs


def _determine_module_and_kwarg(self, original_node: cst.Call):
maybe_name = self.get_aliased_prefix_name(original_node, self._module_name)

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Replaces multiple expressions involving if operator with 'walrus' operator.

@sonarqubecloud

Copy link
Copy Markdown

@clavedeluna
clavedeluna merged commit e6da90f into sonar-timezone Aug 30, 2024
@clavedeluna
clavedeluna deleted the pixeebot/sonar-timezone branch August 30, 2024 17:32
github-merge-queue Bot pushed a commit that referenced this pull request Aug 30, 2024
* add core codemod

* document

* add sonar codemod

* update pygoat findings

* Hardening suggestions for codemodder-python / sonar-timezone (#818)

* update pygoat findings

* Use Assignment Expression (Walrus) In Conditional

---------

Co-authored-by: clavedeluna <danalitovsky+git@gmail.com>
Co-authored-by: pixeebot[bot] <104101892+pixeebot[bot]@users.noreply.github.com>

---------

Co-authored-by: pixeebot[bot] <104101892+pixeebot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant