Skip to content

Commit 5289a58

Browse files
seqradevakullpp
andauthored
Add Security Analysis section with OpenTaint (#1295)
* Add Security Analysis section with OpenTaint * Reword OpenTaint description to be descriptive, not promotional (review feedback) * Clarify it is the agents' analysis that runs once (review feedback) * Reword: 'this expensive work' instead of 'analysis' to avoid ambiguity * Reframe: engine reuses rules instead of repeating the work; state positive qualities * Clarify: engine reuses rules during search, not repeating the agents' learning work * Place OpenTaint in Code Analysis --------- Co-authored-by: Andreas Kull <akullpp@gmail.com>
1 parent 34428b0 commit 5289a58

1 file changed

Lines changed: 1 addition & 0 deletions

File tree

README_SOURCE.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -148,6 +148,7 @@ _Tools that provide metrics and quality measurements._
148148
- [Mutability Detector](https://github.com/MutabilityDetector/MutabilityDetector) - Reports whether instances of a given class are immutable.
149149
- [NullAway](https://github.com/uber/NullAway) - Eliminates NullPointerExceptions with low build-time overhead.
150150
- [OpenRewrite](https://github.com/openrewrite/rewrite) - Automates large-scale source-code refactoring through reusable recipes.
151+
- [OpenTaint](https://github.com/seqra/opentaint) - Interprocedural taint analyzer for Java and Spring applications with reusable security rules and dependency models.
151152
- [PMD](https://github.com/pmd/pmd) - Source code analysis for finding bad coding practices.
152153
- [RefactorFirst](https://github.com/jimbethancourt/RefactorFirst) - Identifies and prioritizes God Classes and Highly Coupled classes.
153154
- [SonarJava](https://github.com/SonarSource/sonar-java) - Static analyzer for SonarQube & SonarLint. (LGPL-3.0-only)

0 commit comments

Comments
 (0)