hex0punk / wally

Function callpath mapping analysis tool for Go
Mozilla Public License 2.0
28 stars 0 forks source link

adds match-filter as single function search mode option #67

Closed hex0punk closed 2 months ago

dryrunsecurity[bot] commented 2 months ago

DryRun Security Summary

The provided code changes include updates to the .gitignore file, enhancements to the search command functionality in the cmd/search.go file, and improvements to the documentation in the README.md file for the Wally application, which can be considered positive from an application security perspective.

Expand for full summary
**Summary:** The provided code changes include updates to the `.gitignore` file, enhancements to the `search` command functionality in the `cmd/search.go` file, and improvements to the documentation in the `README.md` file for the Wally application. The changes to the `.gitignore` file are routine and do not raise any immediate security concerns. The addition of the `scripts/` directory to the list of ignored files is a common practice to exclude development-specific or build-related files from the repository. The changes to the `cmd/search.go` file introduce a new `matchFilter` flag, which allows users to filter the selected function call matches based on a package prefix. This enhancement can be considered positive from an application security perspective, as it provides more granular control over the search functionality and can help in reducing the risk of exposing sensitive information or functionality. The updates to the `README.md` file focus on explaining the differences between match filters and path filters, providing more details on the filtering capabilities of the `wally` tool, and describing its features for route detection, fault tolerance analysis, and visualization. These improvements to the documentation can help security engineers better understand and utilize the security-relevant capabilities of the Wally application. **Files Changed:** 1. `.gitignore`: The changes in this file add the `scripts/` directory to the list of ignored files and directories, which is a common practice to exclude development-specific or build-related files from the repository. 2. `cmd/search.go`: The changes in this file introduce a new `matchFilter` flag, which allows users to filter the selected function call matches based on a package prefix. This enhancement can be considered positive from an application security perspective, as it provides more granular control over the search functionality. 3. `README.md`: The changes in this file improve the documentation by explaining the differences between match filters and path filters, providing more details on the filtering capabilities of the `wally` tool, and describing its features for route detection, fault tolerance analysis, and visualization. These improvements can help security engineers better understand and utilize the security-relevant capabilities of the Wally application.

Code Analysis

We ran 9 analyzers against 3 files and 0 analyzers had findings. 9 analyzers had no findings.

Riskiness

:green_circle: Risk threshold not exceeded.

View PR in the DryRun Dashboard.