DataDog / guarddog

:snake: :mag: GuardDog is a CLI tool to Identify malicious PyPI and npm packages
https://securitylabs.datadoghq.com/articles/guarddog-identify-malicious-pypi-packages/
Apache License 2.0
628 stars 44 forks source link

Dedup YARA findings #480

Closed sobregosodd closed 5 days ago

sobregosodd commented 1 month ago

The way YARA expression works produces several matches due to backtracking in regex, which is hard to prevent in the expressions since it don't fully supports PCRE2 out of the box.

This PR deduplicates same findings in YARA executions tiding up the output of the tool