SAST Security Plugin

Ожидаемый результат:

To scan your Flask app for SQL injection vulnerabilities using Bandit and Semgrep:

1. Install tools: `pip install bandit semgrep`

2. Run Bandit: `bandit -r . -f json -o bandit-report.json`

3. Run Semgrep with SQL injection rules:
```bash
semgrep --config=p/security-audit --json --output=semgrep-sqli.json
```

4. Review the JSON reports for SQL injection findings. Look for:
- String formatting in SQL queries (B608, B611)
- Unsanitized user input in queries
- Missing parameterized queries

5. Fix identified issues by using parameterized queries:
```python
# Vulnerable
cursor.execute("SELECT * FROM users WHERE id = " + user_id)

# Secure
cursor.execute("SELECT * FROM users WHERE id = %s", (user_id,))
```

Ожидаемый результат:

To configure ESLint security for TypeScript React:

1. Install dependencies:
```bash
npm install --save-dev eslint @typescript-eslint/parser @eslint/plugin-security eslint-plugin-react
```

2. Create .eslintrc-security.json:
```json
{
"parser": "@typescript-eslint/parser",
"plugins": ["@eslint/plugin-security", "react"],
"extends": ["plugin:security/recommended"],
"rules": {
"security/detect-object-injection": "error",
"security/detect-non-literal-fs-filename": "error",
"security/detect-eval-with-expression": "error",
"no-danger": "error"
}
}
```

3. Run scan:
```bash
eslint --ext .ts,.tsx --format json > eslint-security-report.json
```