variant-analysis

To find vulnerability variants, describe the original issue and the skill applies iterative generalization across the codebase. It uses ripgrep, Semgrep, and CodeQL to discover similar security patterns and copy-paste bugs across different languages and file types.

Yes, you can generate CodeQL and Semgrep queries from a known security pattern. The skill supports query generation to automate variant detection and triage, expanding from exact matches to broader semantic patterns across your repository.

The best way to locate copy-paste bugs is using iterative pattern generalization across the repository. The skill applies exact-match patterning and semantic search using ripgrep, Semgrep, and CodeQL to uncover related manifestations across multiple languages and file types.

Yes, variant analysis works with ripgrep for code search across large projects. It uses ripgrep alongside Semgrep and CodeQL to apply iterative generalization, searching the entire repository to discover similar security issues across teams and modules.

To triage security issues found during variant analysis, the skill applies query generation support for CodeQL and Semgrep. This automates the detection and triage of vulnerability variants, providing reporting on similar issues located across the codebase.

Use iterative generalization after capturing the original bug instance with exact-match patterning for reproducibility. Generalization then expands the search to uncover broader semantic vulnerability variants and related manifestations across the codebase.