Skip to content

Conversation

@shivasurya
Copy link
Owner

@shivasurya shivasurya commented Nov 9, 2025

Adds dataflow integration layer wrapping existing taint analysis algorithms. Routes local scope to intra-procedural AnalyzeIntraProceduralTaint and global scope to cross-function path finding with DFS-based callgraph traversal for source-to-sink detection.

@codecov
Copy link

codecov bot commented Nov 9, 2025

Codecov Report

❌ Patch coverage is 50.39370% with 63 lines in your changes missing coverage. Please review.
✅ Project coverage is 80.11%. Comparing base (a57ab9e) to head (8e604b0).
⚠️ Report is 1 commits behind head on main.

Files with missing lines Patch % Lines
sourcecode-parser/dsl/dataflow_executor.go 51.20% 59 Missing and 2 partials ⚠️
sourcecode-parser/dsl/ir_types.go 0.00% 2 Missing ⚠️
Additional details and impacted files
@@            Coverage Diff             @@
##             main     #359      +/-   ##
==========================================
- Coverage   80.71%   80.11%   -0.60%     
==========================================
  Files          62       63       +1     
  Lines        6326     6453     +127     
==========================================
+ Hits         5106     5170      +64     
- Misses       1007     1068      +61     
- Partials      213      215       +2     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@shivasurya shivasurya added the go Pull requests that update go code label Nov 9, 2025
@shivasurya shivasurya changed the title feat(dsl): Add dataflow integration for taint analysis feat(go): Add dataflow integration for taint analysis Nov 9, 2025
@shivasurya shivasurya marked this pull request as ready for review November 10, 2025 03:36
@safedep
Copy link

safedep bot commented Nov 10, 2025

SafeDep Report Summary

Green Malicious Packages Badge Green Vulnerable Packages Badge Green Risky License Badge

No dependency changes detected. Nothing to scan.

This report is generated by SafeDep Github App

Copy link
Owner Author

shivasurya commented Nov 10, 2025

Merge activity

  • Nov 10, 4:23 AM UTC: A user started a stack merge that includes this pull request via Graphite.
  • Nov 10, 4:36 AM UTC: Graphite rebased this pull request as part of a merge.
  • Nov 10, 4:37 AM UTC: @shivasurya merged this pull request with Graphite.

@shivasurya shivasurya changed the base branch from pr-07-go-executor-variable-matcher to graphite-base/359 November 10, 2025 04:34
@shivasurya shivasurya changed the base branch from graphite-base/359 to main November 10, 2025 04:35
Implements thin integration layer for dataflow analysis consuming Python DSL JSON IR. Routes local scope to intra-procedural analysis and global scope to cross-function path finding with existing AnalyzeIntraProceduralTaint and findPath DFS algorithms.

🤖 Generated with Claude Code

Co-Authored-By: Claude <noreply@anthropic.com>
@shivasurya shivasurya force-pushed the pr-08-go-dataflow-integration branch from 2bb87f8 to 8e604b0 Compare November 10, 2025 04:36
@shivasurya shivasurya merged commit 0018797 into main Nov 10, 2025
3 checks passed
@shivasurya shivasurya deleted the pr-08-go-dataflow-integration branch November 10, 2025 04:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

enhancement New feature or request go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants