steady icon indicating copy to clipboard operation
steady copied to clipboard

Where is the output result of Static Analysis: Potential execution of vulnerable code

Open ZupeiNie opened this issue 1 year ago • 1 comments

Hello, I want to know where is the output result of Static Analysis: Potential execution of vulnerable code, I can see the call chain on the front end, but I can’t find relevant information in the report. Where can I get the call chain information? image

ZupeiNie avatar Jul 19 '23 14:07 ZupeiNie

We only show the call path to vulnerable methods in the frontend, we do not include this detailed information in the report. You can obtain it programmatically by calling this endpoint: https://github.com/eclipse/steady/blob/master/rest-backend/src/main/java/org/eclipse/steady/backend/rest/ApplicationController.java#L2617

henrikplate avatar Jul 20 '23 10:07 henrikplate