chore(iast): add more iast tests

[avara1986]

• Add unit tests to verify APPSEC-57095 and APPSEC-57094 System tests bugs
• Add more hypothesis scenarios for aspects
• Improve should_iast_patch tests and add more validations

Checklist

• PR author has checked that all the criteria below are met
• The PR description includes an overview of the change
• The PR description articulates the motivation for the change
• The change includes tests OR the PR description describes a testing strategy
• The PR description notes risks associated with the change, if any
• Newly-added code is easy to change
• The change follows the library release note guidelines
• The change includes or references documentation updates if necessary
• Backport labels are set (if applicable)

Reviewer Checklist

• Reviewer has checked that all the criteria below are met
• Title is accurate
• All changes are related to the pull request's stated goal
• Avoids breaking API changes
• Testing strategy adequately addresses listed risks
• Newly-added code is easy to change
• Release note makes sense to a user of the library
• If necessary, author has acknowledged and discussed the performance implications of this PR as reported in the benchmarks PR comment
• Backport labels are set in a manner that is consistent with the release branch maintenance policy

[github-actions]

CODEOWNERS have been resolved as:

tests/appsec/integrations/packages_tests/test_ast_patching.py           @DataDog/asm-python
ddtrace/appsec/_iast/_ast/iastpatch.c                                   @DataDog/asm-python
ddtrace/appsec/_iast/_logs.py                                           @DataDog/asm-python
ddtrace/appsec/_iast/taint_sinks/command_injection.py                   @DataDog/asm-python
tests/appsec/app.py                                                     @DataDog/asm-python
tests/appsec/iast/_ast/test_ast_patching.py                             @DataDog/asm-python
tests/appsec/iast/aspects/test_split_aspect.py                          @DataDog/asm-python
tests/appsec/iast/aspects/test_str_aspect.py                            @DataDog/asm-python
tests/appsec/iast/iast_utils.py                                         @DataDog/asm-python
tests/appsec/integrations/django_tests/django_app/urls.py               @DataDog/asm-python
tests/appsec/integrations/django_tests/django_app/views.py              @DataDog/asm-python
tests/appsec/integrations/django_tests/test_django_appsec_iast.py       @DataDog/asm-python
tests/appsec/integrations/flask_tests/test_iast_flask_testagent.py      @DataDog/asm-python

[github-actions]

Bootstrap import analysis

Comparison of import times between this PR and base.

Summary

The average import time from this PR is: 233 ± 3 ms.

The average import time from base is: 234 ± 3 ms.

The import time difference between this PR and base is: -1.1 ± 0.1 ms.

Import time breakdown

The following import paths have shrunk:

ddtrace.auto 1.898 ms (0.81%)

ddtrace.bootstrap.sitecustomize 1.228 ms (0.53%)

ddtrace.bootstrap.preload 1.228 ms (0.53%)

ddtrace.internal.products 1.228 ms (0.53%)

ddtrace.internal.remoteconfig.client 0.609 ms (0.26%)

ddtrace 0.670 ms (0.29%)

[pr-commenter]

Benchmarks

Benchmark execution time: 2025-04-25 15:54:45

Comparing candidate commit 3af4e90 in PR branch avara1986/avara1986/improve_iast_tests_3 with baseline commit 518a913 in branch main.

Found 0 performance improvements and 2 performance regressions! Performance is the same for 498 metrics, 8 unstable metrics.

scenario:iast_aspects-format_map_aspect

• 🟥 execution_time [+248.695ns; +391.938ns] or [+7.591%; +11.963%]

scenario:iast_aspects-ljust_aspect

• 🟥 execution_time [+1.230µs; +1.480µs] or [+9.318%; +11.219%]