Tree-Sitter Implementation with Source Sink Analysis

shivasurya / code-pathfinder

Code Pathfinder, the open-source alternative to GitHub CodeQL. Built for advanced structural search, derive insights, find vulnerabilities in code.

https://codepathfinder.dev

GNU Affero General Public License v3.0

35 stars 6 forks source link

Closed shivasurya closed 11 months ago

shivasurya commented 11 months ago

Used GoLang Tree-Sitter for parsing AST code
Generates AST and then creates method declaration and invokation relationship
Makes it available to search via DFS to find connectivity
Exposes API endpoint to query Source Sink analysis and spits codesnippet, connectivity, line number information