How to define the most strict configuration possible for Progpilot ?

designsecurity / progpilot

A static analysis tool for security

MIT License

331 stars 61 forks source link

How to define the most strict configuration possible for Progpilot ? #39

Closed Allan1901 closed 1 year ago

Allan1901 commented 2 years ago

I’m collaborating in a opensource project :

https://bitbucket.org/AliasAPI/damnp/src/master/etc/progpilot/run_progpilot.sh

And i am finding trouble configuring Progpilot in the most sensitive way possible, so it would detected every generally undesired line of code. If anyone has any tips, it would be very welcome.

eric-therond commented 1 year ago

Hello, sorry for the delay by default progpilot has the strictest configuration possible

you can still play a bit with maximum analysis duration/max memory/max file size options, see the last 3 lines here: https://github.com/designsecurity/progpilot/blob/master/projects/example_config/configuration.yml#L35 but it is something a bit experimental, it can have a high impact on performances.