ZupeiNie

Problems in building steady

1

Hi, Encountered this problem when building staedy. Execute the command: `docker-compose up -d --build` An error: `unexpected character "." in variable name near "vulas.backend.cveCache.refetchAllMs=7200000\n\n# Determines the waiting time between the...

Hello, I want to know if this project has a method to judge that function A calls function B (non-direct call, and arbitrary)，thank you!

How to run dynamic analysis successfully

2

I used steady's maven scan by adding configuration in the project's pom file. In use, app and a2c program analysis can succeed and obtain results, but upload, instr, t2c, etc....

Where is the output result of Static Analysis: Potential execution of vulnerable code

1

Hello, I want to know where is the output result of `Static Analysis: Potential execution of vulnerable code`, I can see the call chain on the front end, but I...

Some issues regarding the running mode of the Steady database

1

Steady build method: [[QuickStart](https://eclipse.github.io/steady/user/tutorials/)](https://eclipse.github.io/steady/user/tutorials/) Question 1：View backend http://localhost:8033/bugs/ Found only 501 cve information, while there are 729 cve information in `kb-importer/data/.kaybee/repositories/github.com_ sap.project-kb_vulnerability-data/statements`and 731 cve information in `kb-importer/data/statements`. I suspect that...

请问这些文件的内容说明在哪里，从readme中看不出来，十分感谢

15


是否有支持判断A函数调用B函数（非直接调用）的接口

7

你好，请问该项目是否有支持判断A函数调用B函数（非直接调用）的接口

分析模式不同产生的结果内容存在不一致

4

你好 在使用过程中，我看到工具可以在配置文件中填入一个jar包的地址或者一个目录，如果是一个jar包会生成一个结果文件夹（模式A），但如果是多行jar包地址或者是目录则会先合成一个jar包再生成结果文件（模式B）。当我输入相同的多个jar包时，模式A得到多个结果文件夹，我将其中的method_call.txt汇总后得到的数据和我输入一个目录（目录下是和模式A相同的jar包）输出一个method_call.txt的内容存在差异，即两种模式分析出来的结果不同。 想请问这两种模式下出现不同结果的原因，十分感谢！