SHAdd0WTAka / Zen-Ai-Pentest / 23114307539

5%

push

github

fix: resolve Dependabot security alerts #134-150

- cryptography>=44.0.3 (CVE-2024-12356 - HIGH)
- python-multipart>=0.0.20 (Arbitrary File Write - HIGH)
- weasyprint>=65.1 (SSRF Bypass - HIGH)
- jinja2>=3.1.7 (sandbox breakout - MEDIUM)
- requests>=2.32.4 (.netrc credentials leak - MEDIUM)

Add optimized CodeQL config to reduce false positives:
- Exclude tests/, docs/, __pycache__/
- Add local analysis script
- Add optimized GitHub workflow

Fixes: GitHub Security Alerts #134, #136, #137, #147, #148

Co-authored-by: root <root@SHA256.localdomain>

13 of 1234 branches covered (1.05%)

Branch coverage included in aggregate %.

599 of 11731 relevant lines covered (5.11%)

0.05 hits per line