search

Te-k / harpoon

CLI tool for open source and threat intelligence
https://www.randhome.io/blog/2018/02/23/harpoon-an-osint-/-threat-intelligence-tool/
GNU General Public License v3.0
1.16k stars 181 forks source link

Static analysis has some interesting results #142

Closed TomMD closed 2 years ago

TomMD commented 3 years ago

I saw your twitter comment and decided to run some analysis tools in response. N.B. You can turn checkers these on for PRs by installing the app (disclaimer: my company's app).

The results are here. They are from semgrep and bandit - both of which are open source python analysis tools. I'm not sure why Facebook's Python type checker (pyre) didn't work but if that's something you'd like then we can definitely work through it.

Te-k commented 3 years ago

Thanks, that's useful, I will have a look !