fix: triage semgrep SQL findings

2026-10-05 17:29:31 +05:30
parent 3355c20202
commit 412cbd51c6
3 changed files with 12 additions and 12 deletions
@@ -394,7 +394,7 @@ def repair_legacy_local_day_evidence(conn: sqlite3.Connection) -> int:
                "bytes_written": row[2], "bytes_read": row[3],
                "segment_id": row[4], "local_tz": row[5],
            }
-            for row in conn.execute(sample_select)
+            for row in conn.execute(sample_select)  # nosemgrep: sqlalchemy-execute-raw-query -- query text is built from constant fragments only; no external input
        ]
        for previous, current in pairwise(samples):
            start = previous["ts"]
@@ -1018,7 +1018,7 @@ def query_local_day_summary(
    """
    tz_filter = " AND tz_name = ?" if tz_name else ""
    params = (local_date, tz_name) if tz_name else (local_date,)
-    row = conn.execute(
+    row = conn.execute(  # nosemgrep: sqlalchemy-execute-raw-query -- only constant fragments are concatenated; values are bound via ? placeholders
        "SELECT local_date, tz_name, tz_offset, utc_start, utc_end, "
        "       bytes_written, bytes_read, coverage, sample_count, complete, "
        "       activity_seconds, activity_intervals, activity_incomplete, "