gabrielbbaldez/Spring Taint Analysis
Interprocedural taint analysis for Spring Boot. Finds multi-layer data-flow vulnerabilities SonarQube cannot reach.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| path | Compiled classes directory or JAR to scan (relative to the workspace). Build your project first. | yes | — |
| libs | Dependency classpath needed to resolve the target (path-separator-joined), e.g. from `mvn dependency:build-classpath`. | no | "" |
| config | Custom taint configuration file. Defaults to the bundled Spring config. | no | "" |
| output | SARIF 2.1 output file. | no | spring-taint.sarif |
| severity | Only report these severities (comma-separated: critical,high,medium,low). | no | "" |
Outputs
no outputs