Package com.tonic.analysis.cpg.taint

Taint tracking from sources to sinks over the code property graph.

Class Summary

Class	Description
TaintAnalysisResult	Collected taint paths from one analysis run, indexed by vulnerability type and severity.
TaintPath	A single tainted data flow from a source to a sink, with the CPG nodes traversed and any sanitizers seen along the way.
TaintPath.Builder	Accumulator for the endpoints and hop list of a TaintPath.
TaintQuery	A source-to-sink taint search over a code property graph, configured with source, sink, and sanitizer definitions.
TaintQuery.Sanitizer	A regex pair matching call targets that neutralize taint on a path.
TaintSink	A regex-matched method call site where tainted data causes a vulnerability, carrying the argument index that must stay untainted.
TaintSink.Builder	Mutable accumulator for the fields of a TaintSink.
TaintSource	A regex-matched method call site that introduces tainted data, either through its return value or through one argument.
TaintSource.Builder	Mutable accumulator for the fields of a TaintSource.

Enum Summary

Enum	Description
Severity	Severity ranking for taint findings, from informational to critical.
TaintType	Origin categories for tainted data.
VulnerabilityType	Vulnerability classes a taint sink can represent.