3 ms·
CodeQL will do this for some languages, the kind of bugs I've seen it identify have been pretty impressive, I'm sure there are some other static analyzers that
by tossaway9000 5y ago
CodeQL will do this for some languages, the kind of bugs I've seen it identify have been pretty impressive, I'm sure there are some other static analyzers that can do this as well.
- alcover 5y agoThank you. This tool is on the heavy side, with its seemingly own query language. I was rather thinking of a specialized scanner (say only for C sources) that just looks for definite classes of vulns, not necessarily scriptable.
- tossaway9000 5y agoCodeQL comes with a bunch of pre-configured queries for the language you're using (at least when running on Github enterprise)