Merge pull request #7631 from RasmusWL/sqlalchemy-scoped-session

Approved by tausbn

Author: codeql-ci

python/ql/lib/semmle/python/frameworks/SqlAlchemy.qll

@@ -211,6 +211,13 @@ module SqlAlchemy {
               .getReturn()
               .getMember("begin")
               .getACall()
+        or
+        this =
+          API::moduleImport("sqlalchemy")
+              .getMember("orm")
+              .getMember("scoped_session")
+              .getReturn()
+              .getACall()
       }
     }
 

python/ql/test/library-tests/frameworks/sqlalchemy/new_tests.py

@@ -147,6 +147,13 @@
     result = session.execute(raw_sql) # $ getSql=raw_sql
     assert result.fetchall() == [("FOO",)]
 
+# scoped_session
+Session = sqlalchemy.orm.scoped_session(sqlalchemy.orm.sessionmaker(engine))
+session = Session()
+
+result = session.execute(raw_sql) # $ getSql=raw_sql
+assert result.fetchall() == [("FOO",)]
+
 # Querying (1.4)
 # see https://docs.sqlalchemy.org/en/14/orm/session_basics.html#querying-1-x-style