Skip to content

Add OpenTaint static analyzer support#419

Open
seqradev wants to merge 2 commits intoOWASP-Benchmark:masterfrom
seqradev:seqradev/add-seqra
Open

Add OpenTaint static analyzer support#419
seqradev wants to merge 2 commits intoOWASP-Benchmark:masterfrom
seqradev:seqradev/add-seqra

Conversation

@seqradev
Copy link
Copy Markdown

@seqradev seqradev commented Feb 6, 2026

  • Add scripts/runOpenTaint.sh to run the Seqra static analyzer via Docker
  • Follows the existing pattern of other tool runner scripts (uses requireCommand, getBenchmarkVersion.sh)
  • Automatically pulls the latest Seqra image, detects versions, and outputs SARIF results to the results/ directory
  • Reader: Add OpenTaint SARIF reader support BenchmarkUtils#266

Add scripts/runSeqra.sh using Docker-based approach
@seqradev seqradev marked this pull request as draft March 30, 2026 10:16
@seqradev seqradev changed the title Add Seqra static analyzer support Add OpenTaint static analyzer support Mar 30, 2026
@seqradev seqradev marked this pull request as ready for review March 30, 2026 22:44
@davewichers
Copy link
Copy Markdown
Contributor

@darkspirit510 - Can you test this with the PR in BenchmarkUtils to make sure they both work properly together?

@darkspirit510
Copy link
Copy Markdown
Contributor

@seqradev Missing x flag.

zsh: permission denied: scripts/runOpenTaint.sh

Copy link
Copy Markdown
Contributor

@darkspirit510 darkspirit510 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@davewichers Works with OWASP-Benchmark/BenchmarkUtils#266 👍

@seqradev just one minor comment.

Comment thread scripts/runOpenTaint.sh
docker pull ghcr.io/seqra/opentaint

benchmark_version=$(scripts/getBenchmarkVersion.sh 2>/dev/null | tail -1)
opentaint_version=$(docker run --rm ghcr.io/seqra/opentaint opentaint --version | grep -oE 'v[0-9]+\.[0-9]+\.[0-9]+' || docker run --rm ghcr.io/seqra/opentaint opentaint --version | awk '{print $NF}')
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

You've got a problem and want to solve it with RegEx? Now you got two problems 😅

Just drop it and use the awk code 🤷‍♂️

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants