Skip to content

TealQL is an SAST powered by Github Advanced Security's CodeQL, bringing the latest in Static Analysis tooling to the Algorand Virtual Machine's native language.

Notifications You must be signed in to change notification settings

Argimirodelpozo/codeql-TEAL

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

11 Commits
 
 
 
 
 
 
 
 

Repository files navigation

TealQL

TealQL is an SAST powered by Github Advanced Security's CodeQL, bringing the latest in Static Analysis tooling to the Algorand Virtual Machine's native language.

Instalation

Database creation

codeql database create --overwrite --search-path codeql/teal/extractor-pack -l teal test-projects/db1 -s test-projects/

Usage

Features coming soon!

How to contribute

Made with love. If you are into this kind of stuff you may also go check: TEALFuzz, a custom made fuzzer for TEAL programs that makes use of TealQL to aid in the creation of a fuzzing campaign setup.

Others: rebuilding extractors

When encountering parsing errors, a grammar update is probably needed.
Fix the appropriate rule in the grammar, commit and push to main.
Then, move to the scripts folder and do:

./create-extractor-pack.sh

This will rebuild the rust extractor, regenerate teal.dbscheme, TreeSitter.qll, and move them into the correct folders.

About

TealQL is an SAST powered by Github Advanced Security's CodeQL, bringing the latest in Static Analysis tooling to the Algorand Virtual Machine's native language.

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published