trailmark

You can analyze source code for security vulnerabilities by constructing and querying multi-language code graphs to map functions, classes, and calls. This approach identifies attack surfaces, complexity hotspots, and entry points during security reviews.

Source code graph analysis for smart contract auditing builds directed graphs of functions, metadata, and calls to identify security vulnerabilities. It applies pre-analysis passes like blast radius and taint propagation to map attack surfaces.

Yes, you need to install the trailmark package to parse source code and perform graph analysis. Once installed, you execute security analysis by running the analyze command against your target directory.

Yes, code graph analysis supports taint propagation and blast radius checks through pre-analysis passes. It enumerates entry points and privilege boundaries to pinpoint attack surfaces and complexity hotspots in source code.

The best way to identify attack surfaces and entry points during a code review is by building source code graphs. This method applies pre-analysis passes to reveal blast radius, taint propagation, and privilege boundaries.

Yes, code graph security analysis works automatically across multiple languages by setting the language parameter to auto. It parses the target directory and constructs directed graphs to detect vulnerabilities without manual language configuration.