[codeql-go] I made a tool to generate taint-tracking models and their test code #198
Unanswered
gagliardetto
asked this question in
Show and tell
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
Uh oh!
There was an error while loading. Please reload this page.
-
What I made
I made a tool to speed up the creation of CodeQL taint-tracking models for Go: Codebox
It works like this: you select the flow of data in a web-based UI, and the tool generates the CodeQL taint-tracking models and the Go code to test those models.
Here's what the interface looks like:
When you close codebox, it generates your CodeQL and Go files in your specified directory.
Recently, I updated it to work with the official "Go Module Mirror" (proxy.golang.org) so that
@latest
.What I used it for
See #187
Beta Was this translation helpful? Give feedback.
All reactions