4 ms·

Thank you. This tool is on the heavy side, with its seemingly own query language. I was rather thinking of a specialized scanner (say only for C sources) that

Thank you. This tool is on the heavy side, with its seemingly own query language. I was rather thinking of a specialized scanner (say only for C sources) that just looks for definite classes of vulns, not necessarily scriptable.

tossaway9000 5y ago
CodeQL comes with a bunch of pre-configured queries for the language you're using (at least when running on Github enterprise)