Alternatives and similar repositories for cpg

Users that are interested in cpg are comparing it to the libraries listed below

• ShiftLeftSecurity / codepropertygraph
  Code Property Graph: specification, query language, and utilities
  ☆511Updated last week
• tuhh-softsec / vul4j
  Vul4J: A Dataset of Reproducible Java Vulnerabilities
  ☆89Updated 3 months ago
• iris-sast / iris
  A neurosymbolic framework for vulnerability detection in code
  ☆86Updated last month
• QilinPTA / Qilin
  Qilin: A New Framework for Supporting Fine-Grained Context-Sensitivity in Java Pointer Analysis
  ☆135Updated 2 months ago
• ghaffarian / progex
  PROGEX (Program Graph Extractor); a cross platform tool for extracting graphical program representations from software source code
  ☆85Updated 3 years ago
• plast-lab / doop
  The official repo of Doop, the declarative pointer analysis framework.
  ☆180Updated 2 months ago
• soot-oss / heros
  IFDS/IDE Solver for Soot and other frameworks
  ☆245Updated 2 years ago
• mistupv / JavaSlicer
  A program slicer for Java, based on the system dependence graph (SDG).
  ☆66Updated last year
• joernio / cpgqls-client-python
  Python library for CPGQL server
  ☆29Updated last year
• VulDeeLocator / VulDeeLocator
  ☆100Updated 7 months ago
• IBM / tree-sitter-codeviews
  Extract and combine multiple source code views using tree-sitter
  ☆140Updated 3 weeks ago
• ASSERT-KTH / VRepair
  open science repo of "Neural Transfer Learning for Repairing Security Vulnerabilities in C Code" https://arxiv.org/pdf/2104.08308
  ☆64Updated last year
• electricalwind / data7
  A vulnerability patch gathering tool
  ☆42Updated 6 years ago
• SMAT-Lab / Scalpel
  Scalpel: The Python Static Analysis Framework
  ☆308Updated last year
• HuantWang / FUNDED_NISL
  FUNDED is a novel learning framework for building vulnerability detection models.
  ☆130Updated last year
• iris-sast / cwe-bench-java
  A manually vetted dataset for security vulnerability detection in Java projects
  ☆55Updated this week
• security-commits / security-patches-dataset
  ☠️ Ground-truth dataset for vulnerability prediction (known research datasets and data sources included such as NVD, CVE Details and OSV)…
  ☆93Updated last year
• IBM / D2A
  This repository is to support contributions for tools and new data entries for the D2A dataset hosted in DAX
  ☆72Updated 3 years ago
• ZeoVan / MSR_20_Code_vulnerability_CSV_Dataset
  A C/C++ Code Vulnerability Dataset with Code Changes and CVE Summaries
  ☆301Updated 4 years ago
• SAP / project-kb
  Home page of project "KB"
  ☆126Updated 2 months ago
• CodeShield-Security / SPDS
  Efficient and Precise Pointer-Tracking Data-Flow Framework
  ☆66Updated 5 months ago
• find-sec-bugs / juliet-test-suite
  A collection of test cases in the Java language. It contains examples for 112 different CWEs.
  ☆55Updated 4 years ago
• chengpeng-wang / LLMDFA
  LLMDFA: Analyzing Dataflow in Code with Large Language Models (NeurIPS 2024)
  ☆115Updated 3 months ago
• ymirsky / VulChecker
  A deep learning model for localizing bugs in C/C++ source code (USENIX'23)
  ☆149Updated last year
• gmu-swe / phosphor
  Phosphor: Dynamic Taint Tracking for the JVM
  ☆176Updated 5 months ago
• secureIT-project / CVEfixes
  CVEfixes: Automated Collection of Vulnerabilities and Their Fixes from Open-Source Software
  ☆250Updated 10 months ago
• RiS3-Lab / FICS
  ☆50Updated 4 years ago
• daanvdh / JavaDataFlow
  Creating Data Flow Graphs from java input classes
  ☆48Updated 11 months ago
• jumormt / DeepWukong
  DeepWukong: Statically Detecting Software Vulnerabilities Using Deep Graph Neural Network
  ☆107Updated 2 years ago
• CGCL-codes / VulDeePecker
  VulDeePecker: A Deep Learning-Based System for Vulnerability Detection
  ☆326Updated 4 years ago