Show HN: Globstar – Open-source static analysis toolkit

Re:Show HN: Globstar – Open-source static analysis toolkit by codepathfinder on Friday February 28, 2025 @01:52PM (#43208999)

Nothing comes closer to CodeQL!

If anyone is interested please checkout, codepathfinder.dev, truly opensource CodeQL alternative.

Feedbacks are appreciated!

[ Parent | on HN ]

Re:Show HN: Globstar – Open-source static analysis toolkit by injuly on Friday February 28, 2025 @03:31PM (#43210132)

Admirable effort :)

But in its current state I don't think it actually replaces any of CodeQL's use cases. The most straight forward way to do what CodeQL does today, would to be implement a flow analysis IR (say CFG+CallGraph) on top of tree-sitter.

Even the QL grammar itself can be in tree-sitter.

[ Parent | on HN ]

Re:Show HN: Globstar – Open-source static analysis toolkit by codepathfinder on Friday February 28, 2025 @04:03PM (#43210799)

Thanks for the feedback. That's the exact plan :raised_hands:

current state of codepathfinder is less than 5% of what codeql has implemented. As security engineer, I personally use it and i'll keep adding + closing the gap.

Feel free to contribute ideas/feedback/bugs. Super appreciable honestly!

[ Parent | on HN ]