Skip to content

Commit 8fe2870

Browse files
committed
docs(faq): clarify AST-pattern format expresses vulnerable and safe patterns
1 parent 5f6b894 commit 8fe2870

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

src/lib/faq.ts

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,7 @@ export type FaqItem = {
77
export const faqItems: readonly FaqItem[] = [
88
{
99
question: "What is OpenTaint?",
10-
answer: "OpenTaint is an open source taint analysis engine for the AI era. It runs inter-procedural dataflow analysis to track untrusted data across function boundaries, persistence layers, aliases, and async code. For Java and Kotlin, the analysis works on bytecode. Rules are written in an AST-pattern format that's readable yet expressive enough for the engine to find real vulnerabilities without flagging safe code. It catches what AST-pattern matchers miss, turns LLM agent findings into reusable rules, and scales beyond what either can do alone.",
10+
answer: "OpenTaint is an open source taint analysis engine for the AI era. It runs inter-procedural dataflow analysis to track untrusted data across function boundaries, persistence layers, aliases, and async code. For Java and Kotlin, the analysis works on bytecode. Rules are written in a readable AST-pattern format expressive enough to describe both vulnerable and safe patterns, letting the engine analyze deeply and precisely. It catches what AST-pattern matchers miss, turns LLM agent findings into reusable rules, and scales beyond what either can do alone.",
1111
},
1212
{
1313
question: "What vulnerabilities does OpenTaint detect?",

0 commit comments

Comments
 (0)