PyPI / sentry-sdk / 3.0.0b1

sentry-sdk 3.0.0b1

Source

https://github.com/getsentry/sentry-python

Artifact scanned

sentry_sdk-3.0.0b1-py3-none-any.whl (wheel · 440.4 KB · SHA-256 2334262deed1…)

Compared with

sentry_sdk-3.0.0a7-py2.py3-none-any.whl (3 signals introduced since)

Files

198 scanned, 5 skipped (binary, oversized, or unrecognised)

Signals

0 critical · 0 warn · 3 info

Scan time

3.9 s

LLM review

Reviewed by claude-haiku-5-5 (Anthropic): 3 of 3 warn and critical signals; 3 demoted to info.

Disclude version

4.3.0

Scanned (UTC)

2026-10-23 09:51

Signals

Ordered by severity, then signals introduced in this release. Hidden characters are shown as ⟨U+…⟩.

1. info warn → info by review encoding-base64 sentry_sdk/consts.py:363:15 new in this release

   base64-like blob (76 bytes, compression ratio 1.14) (raw pass, confidence 0.60)

       The AWS extended request ID as returned in the response headers.
       Example: "wzHcyEWfmOGDIE5QOhTAqFDoDWP3y8IUvpNINCwL9N4TEHbUw0/gZJ+VZTmCNCWR7fezEN3eCiQ="
       """

   likely benign LLM, confidence 0.97 A base64-like example AWS request ID appears in a docstring.

   Reasoning

   The flagged string is an AWS extended request ID example inside a docstring. It is documentation text, not an encoded payload, and the raw pass has a high false-positive rate on base64-looking strings.

2. info warn → info by review frame-introspection sentry_sdk/tracing_utils.py:284:39 new in this release

   `sys._getframe` — call-stack frame introspection (ast pass, confidence 0.70)

       # Find the correct frame
       frame: "Union[FrameType, None]" = sys._getframe()
       while frame is not None:
           abs_path = _get_frame_module_abs_path(frame)

   likely benign LLM, confidence 0.95 sys._getframe is used to locate the correct stack frame for module path resolution.

   Reasoning

   Walking the call stack with sys._getframe to find the first frame outside the SDK is a standard technique in Sentry's tracing code for determining the caller's module path. It is not malicious and is not obfuscation.

3. info warn → info by review frame-introspection sentry_sdk/utils.py:655:32 new in this release

   `sys._getframe` — call-stack frame introspection (ast pass, confidence 0.70)

   
       f: "Optional[FrameType]" = sys._getframe()
       while f is not None:
           if not should_hide_frame(f):

   likely benign LLM, confidence 0.95 sys._getframe walks the call stack to filter frames for error reporting.

   Reasoning

   Stack walking with sys._getframe to skip hidden frames when building an error stack trace is legitimate error-reporting behavior in an SDK, with no decoding, execution, or network activity.

Reproduce This Scan

Run disclude locally to verify. These commands scan the published file; the "new in this release" marks come from comparing it with the previous release's file, which they don't repeat. Add --format sarif for SARIF output. Add --llm (with an API key in the environment) to include the LLM review.

cargo install disclude --version 4.3.0
curl -fsSL -o sentry_sdk-3.0.0b1-py3-none-any.whl https://files.pythonhosted.org/packages/ea/8a/5ab901d9f6860e96c1bc3729711400ac56db88e5801b4020fddb6c68c98d/sentry_sdk-3.0.0b1-py3-none-any.whl
printf '%s  %s\n' 2334262deed11fc798b470b2f849a8c4f8fe0dd64f2237605d4e817e38ccd018 sentry_sdk-3.0.0b1-py3-none-any.whl | shasum -a 256 -c -
unzip -q sentry_sdk-3.0.0b1-py3-none-any.whl -d pkg
disclude scan --untrusted --severity info pkg