dbt-core

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    29:         # instead of rendering the actual value here, to avoid any risk of
    30:         # Jinja manipulation. it will be subbed out later, in SecretRenderer.render_value
>>> 31:         env = get_invocation_context().env
    32:         if var in env and var.startswith(SECRET_ENV_PREFIX):
    33:             return SECRET_PLACEHOLDER.format(var)

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    2209:             raise SecretEnvVarLocationError(var)
    2210: 
>>> 2211:         env = get_invocation_context().env
    2212:         if var in env:
    2213:             return_value = env[var]

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    1694:             raise SecretEnvVarLocationError(var)
    1695: 
>>> 1696:         env = get_invocation_context().env
    1697: 
    1698:         if var in env:

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    90:         if var.startswith(SECRET_ENV_PREFIX):
    91:             raise SecretEnvVarLocationError(var)
>>> 92:         env = get_invocation_context().env
    93:         if var in env:
    94:             return_value = env[var]

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    325:         if var.startswith(SECRET_ENV_PREFIX):
    326:             raise SecretEnvVarLocationError(var)
>>> 327:         env = get_invocation_context().env
    328:         if var in env:
    329:             return_value = env[var]

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    225:             if m:
    226:                 found = m.group(1)
>>> 227:                 value = get_invocation_context().env[found]
    228:                 replace_this = SECRET_PLACEHOLDER.format(found)
    229:                 return rendered.replace(replace_this, value)

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    56: .hypothesis/
    57: test.env
>>> 58: makefile.test.env
    59: *.pytest_cache/
    60: 

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    55: *,cover
    56: .hypothesis/
>>> 57: test.env
    58: makefile.test.env
    59: *.pytest_cache/

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    50: .coverage.*
    51: .cache
>>> 52: .env
    53: nosetests.xml
    54: coverage.xml

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    191: ]
    192: 
>>> 193: [envs.ci.env-vars]
    194: DBT_TEST_USER_1 = "dbt_test_user_1"
    195: DBT_TEST_USER_2 = "dbt_test_user_2"

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    169:         event = PartialParsingEnabled(deleted=deleted, added=len(added), changed=changed)
    170: 
>>> 171:         if get_invocation_context().env.get("DBT_PP_TEST"):
    172:             fire_event(event, level=EventLevel.INFO)
    173:         else:

Decoded base64 content: ��z{Cy��x��+

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: E�"���"w^��肷��aE�)�{

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: ��z{Cy��x��+

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: >�#y�O��i����+

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: >�#y�O��i����+

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: r����ho����F��

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: E�"���"w^��肷��aE�)�{

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: ��z{Cy��x��+

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: ��z{Cy��x��+

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: ��z{Cy��x��+

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: Eꮊ��U�͢�h�wD��+

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: Eꮊ��U�͢�h�wD��+

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: .���y6���Z�焮�+

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: ��ܶ*'E�(���

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: =��x6�i��yjڦ��

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: :��jب��E�(���

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: ��ܶ*'E�(���

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: ��ܶ*'E�(���

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: ��ܶ*'E�(���

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: =��x6�i��yjڦ��

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: �ޭ�^5��>�/�׫

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: =��x6�i��yjڦ��

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: :��jب��E�(���

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: r����ho��k�:��<o}�s�vwݞ�=��sw=�}�_ܢ��u���$���

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: .���y6���Z�焮�+

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: ��^���j����ץ

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: �ޭ�^5��>�/�׫

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: I隞؜2�^��E�(���

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: I隞؜2�^��E�(���

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: I隞؜1��}�-6�^

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: 2'+���r(u�M�Kޞ���'��l

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: =��y�b���i�Z�W�

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: =�퉩Oj�"�h�I�nW�

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: Rv����=�퉩Oj�

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: R�(�)�E�ޭ��x7����*'

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: Rv����=�퉩Oj�

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: Rv����=�퉩Oj�

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: R�(�)�E�ޭ��x7����*'

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: Rv����=�퉩Oj�

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: Rv����=�퉩Oj�

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: Rv����=�퉩Oj�

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: Rv����=�퉩Oj�

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: Rv����=�퉩Oj�

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: Rv����=�퉩Oj�

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: Rv����=�퉩Oj�

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: =�퉩Oj�"�h�I�nW�

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: =��y�b���i�Z�W�

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: Rv����=�퉩Oj�

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: I隞؜1��}�-6�^

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: 2'+���r(u�M�Kޞ���'��l

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Dynamic code evaluation via eval()

Detected by automated pattern matching (rule SC-004) with medium confidence. May be a false positive.

    85:             pass
    86: 
>>> 87:     def _safe_eval(self, node):
    88:         try:
    89:             return ast.literal_eval(node)

Dynamic code evaluation via eval()

Detected by automated pattern matching (rule SC-004) with medium confidence. May be a false positive.

    87:     def _safe_eval(self, node):
    88:         try:
>>> 89:             return ast.literal_eval(node)
    90:         except (SyntaxError, ValueError, TypeError, MemoryError, RecursionError) as exc:
    91:             raise PythonLiteralEvalError(exc, node=self.dbt_node) from exc

Dynamic code evaluation via eval()

Detected by automated pattern matching (rule SC-004) with medium confidence. May be a false positive.

    99:         # for non-literal inputs
    100:         for arg in node.args:
>>> 101:             rendered = self._safe_eval(arg)
    102:             arg_literals.append(rendered)
    103: 

Dynamic code evaluation via eval()

Detected by automated pattern matching (rule SC-004) with medium confidence. May be a false positive.

    104:         for keyword in node.keywords:
    105:             key = keyword.arg
>>> 106:             rendered = self._safe_eval(keyword.value)
    107:             kwarg_literals[key] = rendered
    108: 

Decoded base64 content: ��^�g��'?{h���

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: ��y�� ��y�D��+

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: 1��w(�{^��D��+

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: �{-jY��'��^���

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: ��z���'��^���

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: ��y�� ��y�D��+

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: 1��w(�{^��D��+

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: �b}�-R�hi���

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: �b}�-R�hi���

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: =�$j���h�wD��+

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: u�j�b}�-����[?

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: ��-����b�v�����&�

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: ��-����b�v���.�Ǭ

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

High-entropy string (4.5 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Python requests library HTTP call

Detected by automated pattern matching (rule NS-001) with medium confidence. May be a false positive.

    130: 
    131:         def upload_file():
>>> 132:             upload_response = requests.put(url=upload_url, data=file_data)
    133:             return upload_response.status_code in (200, 204), upload_response
    134: 

High-entropy string (4.9 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

High-entropy string (4.8 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Python requests library HTTP call

Detected by automated pattern matching (rule NS-001) with medium confidence. May be a false positive.

    43: ) -> Optional[semver.VersionSpecifier]:
    44:     try:
>>> 45:         resp = requests.get(version_url, timeout=1)
    46:         data = resp.json()
    47:         version_string = data["info"]["version"]

Possible Base64-encoded payload (long encoded string)

Detected by automated pattern matching (rule OB-001) with medium confidence. May be a false positive.

    58: 
    59: # workaround in case real snowplow tracker is in the env
>>> 60: # the argument was renamed in https://github.com/snowplow/snowplow-python-tracker/commit/39fd50a3aff98a5efdd5c5c7fb5518fe4761305b
    61: INIT_KW_ARGS = (
    62:     {"buffer_size": 30} if SNOWPLOW_TRACKER_VERSION < Version("0.13.0") else {"batch_size": 30}

Python requests library HTTP call

Detected by automated pattern matching (rule NS-001) with medium confidence. May be a false positive.

    97:         self._log_request("POST", payload)
    98: 
>>> 99:         r = requests.post(
    100:             self.endpoint,
    101:             data=payload,

Python requests library HTTP call

Detected by automated pattern matching (rule NS-001) with medium confidence. May be a false positive.

    110:         self._log_request("GET", payload)
    111: 
>>> 112:         r = requests.get(self.endpoint, params=payload, timeout=5.0)
    113: 
    114:         self._log_result("GET", r.status_code)

High-entropy string (4.6 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

High-entropy string (4.6 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

High-entropy string (4.6 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

High-entropy string (4.5 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

High-entropy string (4.5 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

High-entropy string (4.5 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

High-entropy string (4.6 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Possible Base64-encoded payload (long encoded string)

Detected by automated pattern matching (rule OB-001) with medium confidence. May be a false positive.

    48: 
    49: <p align="center">
>>> 50:   <img src="https://raw.githubusercontent.com/dbt-labs/dbt-core/fa1ea14ddfb1d5ae319d5141844910dd53ab2834/etc/dbt-core.svg" alt="dbt logo" width="750"/>
    51: </p>
    52: <p align="center">

Possible Base64-encoded payload (long encoded string)

Detected by automated pattern matching (rule OB-001) with medium confidence. May be a false positive.

    58: **[dbt](https://www.getdbt.com/)** enables data analysts and engineers to transform their data using the same practices that software engineers use to build applications.
    59: 
>>> 60: ![architecture](https://raw.githubusercontent.com/dbt-labs/dbt-core/6c6649f9129d5d108aa3b0526f634cd8f3a9d1ed/etc/dbt-arch.png)
    61: 
    62: ## Understanding dbt

Possible Base64-encoded payload (long encoded string)

Detected by automated pattern matching (rule OB-001) with medium confidence. May be a false positive.

    66: These select statements, or "models", form a dbt project. Models frequently build on top of one another – dbt makes it easy to [manage relationships](https://docs.getdbt.com/docs/ref) between models, and [visualize these relationships](https://docs.getdbt.com/docs/documentation), as well as assure the quality of your transformations through [testing](https://docs.getdbt.com/docs/testing).
    67: 
>>> 68: ![dbt dag](https://raw.githubusercontent.com/dbt-labs/dbt-core/6c6649f9129d5d108aa3b0526f634cd8f3a9d1ed/etc/dbt-dag.png)
    69: 
    70: ## Getting started

High-entropy string (4.6 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

High-entropy string (4.6 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

High-entropy string (4.5 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Possible Base64-encoded payload (long encoded string)

Detected by automated pattern matching (rule OB-001) with medium confidence. May be a false positive.

    1: <p align="center">
>>> 2:   <img src="https://raw.githubusercontent.com/dbt-labs/dbt-core/fa1ea14ddfb1d5ae319d5141844910dd53ab2834/etc/dbt-core.svg" alt="dbt logo" width="750"/>
    3: </p>
    4: <p align="center">

Possible Base64-encoded payload (long encoded string)

Detected by automated pattern matching (rule OB-001) with medium confidence. May be a false positive.

    10: **[dbt](https://www.getdbt.com/)** enables data analysts and engineers to transform their data using the same practices that software engineers use to build applications.
    11: 
>>> 12: ![architecture](https://raw.githubusercontent.com/dbt-labs/dbt-core/6c6649f9129d5d108aa3b0526f634cd8f3a9d1ed/etc/dbt-arch.png)
    13: 
    14: ## Understanding dbt

Possible Base64-encoded payload (long encoded string)

Detected by automated pattern matching (rule OB-001) with medium confidence. May be a false positive.

    18: These select statements, or "models", form a dbt project. Models frequently build on top of one another – dbt makes it easy to [manage relationships](https://docs.getdbt.com/docs/ref) between models, and [visualize these relationships](https://docs.getdbt.com/docs/documentation), as well as assure the quality of your transformations through [testing](https://docs.getdbt.com/docs/testing).
    19: 
>>> 20: ![dbt dag](https://raw.githubusercontent.com/dbt-labs/dbt-core/6c6649f9129d5d108aa3b0526f634cd8f3a9d1ed/etc/dbt-dag.png)
    21: 
    22: ## Getting started

High-entropy string (4.6 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

High-entropy string (4.6 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Python requests library HTTP call

Detected by automated pattern matching (rule NS-001) with medium confidence. May be a false positive.

    61:     fire_event(RegistryProgressGETRequest(url=url))
    62:     # all exceptions from requests get caught in the retry logic so no need to wrap this here
>>> 63:     resp = requests.get(url, timeout=30)
    64:     fire_event(RegistryProgressGETResponse(url=url, resp_code=resp.status_code))
    65:     resp.raise_for_status()

Python requests library HTTP call

Detected by automated pattern matching (rule NS-001) with medium confidence. May be a false positive.

    166:     fire_event(RegistryIndexProgressGETRequest(url=url))
    167:     # all exceptions from requests get caught in the retry logic so no need to wrap this here
>>> 168:     resp = requests.get(url, timeout=30)
    169:     fire_event(RegistryIndexProgressGETResponse(url=url, resp_code=resp.status_code))
    170:     resp.raise_for_status()

High-entropy string (4.6 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Possible Base64-encoded payload (long encoded string)

Detected by automated pattern matching (rule OB-001) with medium confidence. May be a false positive.

    7: 
    8: #### Indirect Selection Default Value
>>> 9: In `@requires.preflight`, dbt reads CLI flags, environment variables, and the parameter's default value. It resolves these inputs based on their precedence order and stores the resolved value in global flags. When loading selectors, the [`selection_criteria_from_dict`](https://github.com/dbt-labs/dbt-core/blob/b316c5f18021fef3d7fd6ec255427054b7d2205e/core/dbt/graph/selector_spec.py#L111) function resolves the indirect selection value to the global flags value if not set. This ensures correct resolution of the indirect selection value.

Possible Base64-encoded payload (long encoded string)

Detected by automated pattern matching (rule OB-001) with medium confidence. May be a false positive.

    1482: 
    1483:                     # Try to cast begin to a datetime using same format as mashumaro for consistency with other yaml-provided datetimes
>>> 1484:                     # Mashumaro default: https://github.com/Fatal1ty/mashumaro/blob/4ac16fd060a6c651053475597b58b48f958e8c5c/README.md?plain=1#L1186
    1485:                     if isinstance(begin, str):
    1486:                         try:

High-entropy string (4.7 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

High-entropy string (4.6 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

High-entropy string (4.7 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Python requests library HTTP call

Detected by automated pattern matching (rule NS-001) with medium confidence. May be a false positive.

    117:     # Step 1: Create ingest request with retry
    118:     def create_ingest():
>>> 119:         response = requests.post(url=config.get_ingest_url(), headers=config.get_headers())
    120:         return response.status_code == 200, response
    121: 

Possible Base64-encoded payload (long encoded string)

Detected by automated pattern matching (rule OB-001) with medium confidence. May be a false positive.

    1146:         if name in self.sql_results:
    1147:             # handle the special case of "main" macro
>>> 1148:             # See: https://github.com/dbt-labs/dbt-core/blob/ada8860e48b32ac712d92e8b0977b2c3c9749981/core/dbt/task/run.py#L228
    1149:             if name == "main":
    1150:                 return self.sql_results["main"]

High-entropy string (4.6 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

High-entropy string (4.7 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

High-entropy string (4.5 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.