Introducing mrva, a terminal-first approach to CodeQL multi-repo variant analysis
blog.trailofbits.com | blog | #appsec | #vulnerability-research | #security-research | #static-analysis | #tool-release | #codeql | #variant-analysis | #terminal
Summary
mrva is a terminal-first tool for CodeQL multi-repository variant analysis: it downloads pre-built databases via the GitHub API, runs custom queries locally, and prints SARIF results to stdout.
- Published
- Collected
Skip to content