ast-grep-essentials/tests/python/python-neo4j-hardcoded-secret-python-test.yml at main · coderabbitai/ast-grep-essentials · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
id: python-neo4j-hardcoded-secret-python
valid:
  - |
     driver = AsyncGraphDatabase.driver(url, auth=basic_auth(username, password))
invalid:
  - |
    from neo4j import (
    basic_auth,
    kerberos_auth,
    bearer_auth,
    AsyncGraphDatabase,
    )
     password = "NEO4J_PASSWORD"
     driver = AsyncGraphDatabase.driver(url, auth=basic_auth(username, password))
  - |
    from neo4j import (
    basic_auth,
    kerberos_auth,
    bearer_auth,
    AsyncGraphDatabase,
    )
    driver = AsyncGraphDatabase.driver(url, auth=basic_auth(username, "NEO4J_PASSWORD"))
  - |
    from neo4j import (
    basic_auth,
    kerberos_auth,
    bearer_auth,
    AsyncGraphDatabase,
    )
    uri = "neo4j://example.com:7687"
    driver = GraphDatabase.driver(uri, auth=kerberos_auth("token"))
  - |
    from neo4j import (
    basic_auth,
    kerberos_auth,
    bearer_auth,
    AsyncGraphDatabase,
    )
    driver = GraphDatabase.driver(uri, auth=bearer_auth("token"))