Skip to content

Instrument remainder of file operations within os sink - #413

Merged
tomaisthorpe merged 1 commit into
mainfrom
os-sink-remaining-methods
Apr 22, 2026
Merged

Instrument remainder of file operations within os sink#413
tomaisthorpe merged 1 commit into
mainfrom
os-sink-remaining-methods

Conversation

@tomaisthorpe

@tomaisthorpe tomaisthorpe commented Apr 17, 2026

Copy link
Copy Markdown
Collaborator

Currently the os sink only instruments OpenFile, which is used in a lot of the higher level methods, however, there are methods that directly call the syscalls, so adding them to the instrumentation.

Summary by Aikido

Security Issues: 0 🔍 Quality Issues: 1 Resolved Issues: 0

⚡ Enhancements

  • Instrumented additional os file operations to perform security checks.

🔧 Refactors

  • Renamed Examine to ExamineOp and generalized scan to accept op.

More info

Comment thread instrumentation/sinks/os/examine.go
@tomaisthorpe
tomaisthorpe merged commit 5dabfd9 into main Apr 22, 2026
24 of 26 checks passed
@tomaisthorpe
tomaisthorpe deleted the os-sink-remaining-methods branch June 2, 2026 15:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants