58 Tech
Apr 23, 2021 · Information Security
Understanding AST, SAST, Taint Analysis, and CodeQL for Java Security Scanning
This article explains the fundamentals of abstract syntax trees, Java AST analysis with Spoon, the principles of static application security testing and taint analysis, and demonstrates how to use CodeQL to detect unsafe Fastjson usage and Spring web path bindings in a CI/CD pipeline.
ASTCodeQLJava
0 likes · 24 min read