I added threat-models: ai to my CodeQL workflow. Now I want to think that if LLM output flows into SQL execution or a shell, ...
description Use when reviewing application source code for SQL injection, unsafe SQL or ORM query construction, including PHP, Doctrine, JavaScript, Python and other web stacks. Trace untrusted data ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results