go-ruleguard Consider to add taint analysis support

Consider to add taint analysis support

Open quasilyte opened this issue 3 years ago • 3 comments

Aug 17 '21 14:08 quasilyte

https://github.com/praetorian-inc/gokart supports ssa-based taint analysis, and semgrep has experimental support for local analysis.

Sep 30 '21 02:09 dgryski

@dgryski have you tried semgrep ssa? Any cool pattern ideas that became possible with this feature?

Oct 15 '21 14:10 quasilyte

I have not played with taint analysis.

Oct 15 '21 14:10 dgryski