Semgrep rules can't detect certain types of Python imports
Semgrep is missing to detect the following patterns of vulnerability. However, bandit is able to detect them.
os = __import__("os")
pickle = __import__("pickle")
sys = __import__("sys")
Here is an example project: https://gitlab.com/ssarka/semgrep-missing-vulnerabilities