Description of the false positive
The await expression is used to run coroutines, which by design have side-effects. However, CodeQL erroneously treats a bare await expression like any other bare expression and thus assumes it has no side-effects and is used in error. This leads to false-positive flags when await is used to trigger a side-effect without a return value.
def foo():
...
# close a critical resource
await acloseURL to the alert on the project page on LGTM.com GithHub
https://github.com/maxfischer2781/asyncstdlib/security/code-scanning/9
Description of the false positive
The
awaitexpression is used to run coroutines, which by design have side-effects. However, CodeQL erroneously treats a bareawaitexpression like any other bare expression and thus assumes it has no side-effects and is used in error. This leads to false-positive flags whenawaitis used to trigger a side-effect without a return value.URL to the alert on the project page on
LGTM.comGithHubhttps://github.com/maxfischer2781/asyncstdlib/security/code-scanning/9