GitPlanet

Cheap and reliable Node.js hosting starts at $3/month, and $1/month static HTML hosting

Created with love in Canada, visit hostnodejs.com today

Feel like to post an Ad? Learn Details
All Projects → github → Codeql Go

github / Codeql Go

Licence: mit
The CodeQL extractor and libraries for Go.

Programming Languages

go
31211 projects - #10 most used programming language
golang
3204 projects

Labels

static-analysisprogram-analysis

Projects that are alternatives of or similar to Codeql Go

Seahorn
SeaHorn Verification Framework
Stars: ✭ 270 (+20.54%)
Mutual labels:  static-analysis, program-analysis
Pyre Check
Performant type-checking for python.
Stars: ✭ 5,716 (+2451.79%)
Mutual labels:  static-analysis, program-analysis
Linter
Static Analysis Compiler Plugin for Scala
Stars: ✭ 273 (+21.88%)
Mutual labels:  static-analysis, program-analysis
tiro
TIRO - A hybrid iterative deobfuscation framework for Android applications
Stars: ✭ 20 (-91.07%)
Mutual labels:  static-analysis, program-analysis
Semgrep Rules
Semgrep rules registry
Stars: ✭ 140 (-37.5%)
Mutual labels:  static-analysis, program-analysis
clam
Static Analyzer for LLVM bitcode based on Abstract Interpretation
Stars: ✭ 180 (-19.64%)
Mutual labels:  static-analysis, program-analysis
Phasar
A LLVM-based static analysis framework.
Stars: ✭ 503 (+124.55%)
Mutual labels:  static-analysis, program-analysis
Wala
T.J. Watson Libraries for Analysis
Stars: ✭ 395 (+76.34%)
Mutual labels:  static-analysis, program-analysis
Bap
Binary Analysis Platform
Stars: ✭ 1,385 (+518.3%)
Mutual labels:  static-analysis, program-analysis
Crab
CoRnucopia of ABstractions: a library for building abstract interpretation-based analyses
Stars: ✭ 102 (-54.46%)
Mutual labels:  static-analysis, program-analysis
iec-checker
Static analysis of IEC 61131-3 programs
Stars: ✭ 36 (-83.93%)
Mutual labels:  static-analysis, program-analysis
Pyt
A Static Analysis Tool for Detecting Security Vulnerabilities in Python Web Applications
Stars: ✭ 2,061 (+820.09%)
Mutual labels:  static-analysis, program-analysis
Dg
[LLVM Static Slicer] Various program analyses, construction of dependence graphs and program slicing of LLVM bitcode.
Stars: ✭ 242 (+8.04%)
Mutual labels:  static-analysis, program-analysis
progge.rs
Program analysis playground for a simple, imperative language
Stars: ✭ 29 (-87.05%)
Mutual labels:  static-analysis, program-analysis
Ikos
Static analyzer for C/C++ based on the theory of Abstract Interpretation.
Stars: ✭ 1,368 (+510.71%)
Mutual labels:  static-analysis, program-analysis
Crab Llvm
Static Analyzer for LLVM bitcode based on Abstract Interpretation
Stars: ✭ 143 (-36.16%)
Mutual labels:  static-analysis, program-analysis
Detect It Easy
Program for determining types of files for Windows, Linux and MacOS.
Stars: ✭ 2,982 (+1231.25%)
Mutual labels:  static-analysis, program-analysis
Diktat
Strict coding standard for Kotlin and a custom set of rules for detecting code smells, code style issues and bugs
Stars: ✭ 196 (-12.5%)
Mutual labels:  static-analysis
Forbidden Apis
Policeman's Forbidden API Checker
Stars: ✭ 216 (-3.57%)
Mutual labels:  static-analysis
Checkov
Prevent cloud misconfigurations during build-time for Terraform, Cloudformation, Kubernetes, Serverless framework and other infrastructure-as-code-languages with Checkov by Bridgecrew.
Stars: ✭ 3,572 (+1494.64%)
Mutual labels:  static-analysis
View All Similar Projects ➔

Go analysis support for CodeQL

This open-source repository contains the extractor, CodeQL libraries, and queries that power Go support in LGTM and the other CodeQL products that GitHub makes available to its customers worldwide.

It contains two major components:

  • an extractor, itself written in Go, that parses Go source code and converts it into a database that can be queried using CodeQL.
  • static analysis libraries and queries written in QL that can be used to analyze such a database to find coding mistakes or security vulnerabilities.

The goal of this project is to provide comprehensive static analysis support for Go in CodeQL.

For the queries and libraries that power CodeQL support for other languages, visit the CodeQL repository.

Installation

Simply clone this repository. There are no external dependencies.

If you want to use the CodeQL extension for Visual Studio Code, import this repository into your VS Code workspace.

Usage

To analyze a Go codebase, either use the CodeQL command-line interface to create a database yourself, or download a pre-built database from LGTM.com. You can then run any of the queries contained in this repository either on the command line or using the VS Code extension.

Note that the lgtm.com branch of this repository corresponds to the version of the queries that is currently deployed on LGTM.com. The main branch may contain changes that have not been deployed yet, so you may need to upgrade databases downloaded from LGTM.com before running queries on them.

Contributions

Contributions are welcome! Please see our contribution guidelines and our code of conduct for details on how to participate in our community.

Licensing

The code in this repository is licensed under the MIT license.

Resources

Note that the project description data, including the texts, logos, images, and/or trademarks, for each open source project belongs to its rightful owner. If you wish to add or remove any projects, please contact us at [email protected].