Skip to content
#

static-analysis

Here are 943 public repositories matching this topic...

PHP-CS-Fixer
hackel
hackel commented Feb 27, 2020

Currently the GlobalNamespaceImportFixer tries to import classes from phpdoc annotations, even if they aren't actually used in the code. This is an issue when your coding style dictates that you always use FQCNs in doc blocks only. I don't want it to use the imported class name or import unnecessary classes.

Ideally, it would also have an option to rewrite it to use the FQCN, but that shoul

simivar
simivar commented Feb 26, 2020

One thing that's super useful for new users is code examples. Right now, the biggest problem for someone to start using PHP_CodeSniffer is lack of a list of available Sniffers with their options and examples. From what I know to get a list of all sniffs right now, you have to go through source code in src/Standards, and it's exhausting. Something like [mlocati/phpPHP-cs-fixer-configurator](htt

Mobile-Security-Framework-MobSF

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

  • Updated Jul 7, 2020
  • Python
sushi2k
sushi2k commented Aug 11, 2019

Describe the issue
Needle doesn't seem to be maintained anymore. The last update was > 1 year and no issues have been answered this year. It also doesnt' seem to work on iOS JB devices with Chimera. FSecureLABS/needle#273

We should review where we use Needle and if other tools are a better alternative (e.g. objection, passionfruit).

checkstyle
l4cr0ss
l4cr0ss commented Feb 28, 2020

I did a quick search of the issues, both open and closed, but didn't see something like what I'm proposing.

The problem I am having is that reek is throwing up warnings for scaffolding code that hasn't yet been fleshed out. I've included an example below.

I'd like a mechanism that will let me suppress all warnings for a function in the particular instance that the function is not yet impleme

mkbhanda
mkbhanda commented Jan 8, 2019

Summary

Get URLs that have parameters, whether http or https, leak sensitive information when they capture parameters such as API-Keys, usernames, and passwords. Browser extensions, bookmarks, history, and server log files capture these, even when operating in anonymous mode. Browser providers could share the information and log files need to mask the sensitive information. Refer: https://ww

dominikh
dominikh commented Apr 25, 2020

Write an article (possibly interactive) on tuning staticcheck's performance. With our new runner (to be committed), memory usage and CPU time behave as expected when you increase the number of processors:

  • memory usage grows linearly
  • runtime is inversely proportional
  • speedups approach an upper limit as per Amdahl's law

If we let staticcheck measure and output the proportion of linear

Improve this page

Add a description, image, and links to the static-analysis topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the static-analysis topic, visit your repo's landing page and select "manage topics."

Learn more

You can’t perform that action at this time.