https://semgrep.dev/playground/r/python.sqlalchemy.security.sqlalchemy-sql-injection.sqlalchemy-sql-injection?editorMode=advanced this is a variation of our current transformer for sql-injection which we can add support for.