Code Security Review tool
Karma Pro, an open-source macOS scanner, reviews multi-language code with AST, heuristics, and an ML classifier.
E. Kellinis announced Karma Pro, an open-source macOS source-code security scanner, on Full Disclosure. It statically analyzes projects in multiple languages using AST-based checks, heuristics, and a machine-learning classifier trained on real patches. The tool also provides interactive call graphs, data-flow diagrams, a bug tracker, and a private research wiki.
- Open-source macOS scanner for multi-language source code
- Uses AST analysis, heuristics, and an ML classifier trained on patches
- Adds call graphs, data-flow diagrams, a bug tracker, and a research wiki
From the original article
Posted by E. Kellinis on Sep 22 Karma Pro is an open source code review tool that can assist code reviewers with a multitude of useful tools. Karma Pro is a macOS source-code security scanner (AST base and Heuristics) that statically analyses projects in multiple languages.
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.