fix: satisfy semgrep on constant-column SQL; use injectable clock for baseline entry_date

2026-10-06 13:01:34 +05:30
parent 670671cb25
commit ef9e7fa7a8
4 changed files with 8 additions and 2 deletions
@@ -447,6 +447,7 @@ def _migrate_6_to_7(conn: sqlite3.Connection) -> None:
        return
    for column in DIAGNOSTIC_SAMPLE_COLUMNS:
        if column not in cols:
+            # nosemgrep: python.lang.security.audit.formatted-sql-query.formatted-sql-query, python.sqlalchemy.security.sqlalchemy-execute-raw-query.sqlalchemy-execute-raw-query -- column is from DIAGNOSTIC_SAMPLE_COLUMNS, a constant
            conn.execute(f"ALTER TABLE samples ADD COLUMN {column} INTEGER")