feat(iast): code injection

[avara1986]

Code Injection vulnerability detection.

System tests (merge after this PR): DataDog/system-tests#3753

Checklist

• PR author has checked that all the criteria below are met
• The PR description includes an overview of the change
• The PR description articulates the motivation for the change
• The change includes tests OR the PR description describes a testing strategy
• The PR description notes risks associated with the change, if any
• Newly-added code is easy to change
• The change follows the library release note guidelines
• The change includes or references documentation updates if necessary
• Backport labels are set (if applicable)

Reviewer Checklist

• Reviewer has checked that all the criteria below are met
• Title is accurate
• All changes are related to the pull request's stated goal
• Avoids breaking API changes
• Testing strategy adequately addresses listed risks
• Newly-added code is easy to change
• Release note makes sense to a user of the library
• If necessary, author has acknowledged and discussed the performance implications of this PR as reported in the benchmarks PR comment
• Backport labels are set in a manner that is consistent with the release branch maintenance policy

[github-actions]

CODEOWNERS have been resolved as:

ddtrace/appsec/_iast/taint_sinks/code_injection.py                      @DataDog/asm-python
releasenotes/notes/iast-feat-code-injection-0213a27bc3340505.yaml       @DataDog/apm-python
tests/appsec/iast/fixtures/taint_sinks/code_injection.py                @DataDog/asm-python
tests/appsec/iast/taint_sinks/test_code_injection.py                    @DataDog/asm-python
ddtrace/appsec/_iast/_patch_modules.py                                  @DataDog/asm-python
ddtrace/appsec/_iast/constants.py                                       @DataDog/asm-python
tests/appsec/iast/conftest.py                                           @DataDog/asm-python
tests/appsec/iast/test_telemetry.py                                     @DataDog/asm-python

[pr-commenter]

Benchmarks

Benchmark execution time: 2025-01-13 11:33:26

Comparing candidate commit 6a5c806 in PR branch avara1986/APPSEC-53594-iast_code_injection with baseline commit 8d818e3 in branch main.

Found 0 performance improvements and 0 performance regressions! Performance is the same for 394 metrics, 2 unstable metrics.

[datadog-dd-trace-py-rkomorn]

Datadog Report

Branch report: avara1986/APPSEC-53594-iast_code_injection
Commit report: 1f7c2ab
Test service: dd-trace-py

✅ 0 Failed, 5 Passed, 1463 Skipped, 58.25s Total duration (32m 21.17s time saved)