Simon Willison's Weblog: static-analysishttp://simonwillison.net/2020-08-07T20:50:13+00:00Simon WillisonPysa: An open source static analysis tool to detect and prevent security issues in Python code2020-08-07T20:50:13+00:002020-08-07T20:50:13+00:00https://simonwillison.net/2020/Aug/7/pysa/
<p><strong><a href="https://engineering.fb.com/security/pysa/">Pysa: An open source static analysis tool to detect and prevent security issues in Python code</a></strong></p>
Interesting new static analysis tool for auditing Python for security vulnerabilities—things like SQL injection and os.execute() calls. Built by Facebook and tested extensively on Instagram, a multi-million line Django application.
<p><small></small>Via <a href="https://news.ycombinator.com/item?id=24083432">Hacker News</a></small></p>
<p>Tags: <a href="https://simonwillison.net/tags/django">django</a>, <a href="https://simonwillison.net/tags/facebook">facebook</a>, <a href="https://simonwillison.net/tags/python">python</a>, <a href="https://simonwillison.net/tags/security">security</a>, <a href="https://simonwillison.net/tags/sql-injection">sql-injection</a>, <a href="https://simonwillison.net/tags/static-analysis">static-analysis</a></p>
A hands-on introduction to static code analysis2020-05-05T00:15:37+00:002020-05-05T00:15:37+00:00https://simonwillison.net/2020/May/5/hands-introduction-static-code-analysis/
<p><strong><a href="https://deepsource.io/blog/introduction-static-code-analysis/">A hands-on introduction to static code analysis</a></strong></p>
Useful tutorial on using the Python standard library tokenize and ast modules to find specific patterns in Python source code, using the visitor pattern.
<p>Tags: <a href="https://simonwillison.net/tags/compilers">compilers</a>, <a href="https://simonwillison.net/tags/python">python</a>, <a href="https://simonwillison.net/tags/static-analysis">static-analysis</a></p>
3 and 1/2 minutes to sort a Terabyte, and a look at Hadoop's code structure2008-07-07T14:15:23+00:002008-07-07T14:15:23+00:00https://simonwillison.net/2008/Jul/7/bill/
<p><strong><a href="http://www.dehora.net/journal/2008/07/06/3-12-minutes-to-sort-a-terabyte-hadoops-code-structure/">3 and 1/2 minutes to sort a Terabyte, and a look at Hadoop's code structure</a></strong></p>
Bill de hÓra uses some clever static analysis tools to explore Hadoop’s 100,000+ lines of code.
<p>Tags: <a href="https://simonwillison.net/tags/bill-de-hora">bill-de-hora</a>, <a href="https://simonwillison.net/tags/hadoop">hadoop</a>, <a href="https://simonwillison.net/tags/java">java</a>, <a href="https://simonwillison.net/tags/static-analysis">static-analysis</a></p>