Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Create a control flow graph to traverse code in possible execution order #1197

Open
ericwb opened this issue Nov 5, 2024 · 0 comments
Open
Labels
enhancement New feature or request

Comments

@ericwb
Copy link
Member

ericwb commented Nov 5, 2024

Is your feature request related to a problem? Please describe.
Bandit could really benefit from a Control Flow Graph to do things like taint analysis and analysis based on possible execution order.

Describe the solution you'd like
There is an existing Python package staticfg that might be useful to generate the CFG. From the CFG bandit can traverse the generated graph instead of the AST.

Describe alternatives you've considered
Current behavior does analysis top-down in the file, which is almost never the execution of the program making things like taint analysis next to impossible.

Additional context
https://github.com/coetaur0/staticfg

Love this idea? Give it a 👍. We prioritize fulfilling features with the most 👍.

@ericwb ericwb added the enhancement New feature or request label Nov 5, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

1 participant