chore(iast): improve check of module names for deny and allow lists

[gnufede]

Code Security: This PR changes the way we match modules and submodules for the IAST patching allowlist and denylist. From now on, we try to match full module names and avoid prefixes, for instance "crypto." in the denylist will now make IAST not patch crypto module but it will patch cryptography module.

Checklist

• PR author has checked that all the criteria below are met
• The PR description includes an overview of the change
• The PR description articulates the motivation for the change
• The change includes tests OR the PR description describes a testing strategy
• The PR description notes risks associated with the change, if any
• Newly-added code is easy to change
• The change follows the library release note guidelines
• The change includes or references documentation updates if necessary
• Backport labels are set (if applicable)

Reviewer Checklist

• Reviewer has checked that all the criteria below are met
• Title is accurate
• All changes are related to the pull request's stated goal
• Avoids breaking API changes
• Testing strategy adequately addresses listed risks
• Newly-added code is easy to change
• Release note makes sense to a user of the library
• If necessary, author has acknowledged and discussed the performance implications of this PR as reported in the benchmarks PR comment
• Backport labels are set in a manner that is consistent with the release branch maintenance policy

[github-actions]

CODEOWNERS have been resolved as:

ddtrace/appsec/_iast/_ast/ast_patching.py                               @DataDog/asm-python

[datadog-dd-trace-py-rkomorn]

Datadog Report

Branch report: gnufede/change-iast-allow-deny-lists-chec
Commit report: e05dde3
Test service: dd-trace-py

✅ 0 Failed, 1868 Passed, 213 Skipped, 41m 6.56s Total Time

[pr-commenter]

Benchmarks

Benchmark execution time: 2024-09-13 09:26:15

Comparing candidate commit e05dde3 in PR branch gnufede/change-iast-allow-deny-lists-chec with baseline commit 15a9399 in branch main.

Found 0 performance improvements and 0 performance regressions! Performance is the same for 10 metrics, 2 unstable metrics.