Code Security Review tool
Karma Pro, an open-source macOS scanner, reviews multi-language code with AST, heuristics, and an ML classifier.
E. Kellinis announced Karma Pro, an open-source macOS source-code security scanner, on Full Disclosure. It statically analyzes projects in multiple languages using AST-based checks, heuristics, and a machine-learning classifier trained on real patches. The tool also provides interactive call graphs, data-flow diagrams, a bug tracker, and a private research wiki.
- Open-source macOS scanner for multi-language source code
- Uses AST analysis, heuristics, and an ML classifier trained on patches
- Adds call graphs, data-flow diagrams, a bug tracker, and a research wiki
Posted by E. Kellinis on Sep 22 Karma Pro is an open source code review tool that can assist code reviewers with a multitude of useful tools. Karma Pro is a macOS source-code security scanner (AST base and Heuristics) that statically analyses projects in multiple languages. It's backed by an ML classifier trained on real patches to catch subtle issues. Beyond scanning, it offers interactive call graphs and data-flow diagrams, a bug tracker, a private research wiki,...
This source does not provide full text. Read it at seclists.org.