m1cm1c / joern

Open-source code analysis platform for C/C++ based on code property graphs

     ██╗ ██████╗ ███████╗██████╗ ███╗   ██╗
     ██║██╔═══██╗██╔════╝██╔══██╗████╗  ██║
     ██║██║   ██║█████╗  ██████╔╝██╔██╗ ██║
██   ██║██║   ██║██╔══╝  ██╔══██╗██║╚██╗██║
╚█████╔╝╚██████╔╝███████╗██║  ██║██║ ╚████║
 ╚════╝  ╚═════╝ ╚══════╝╚═╝  ╚═╝╚═╝  ╚═══╝

Joern

Documentation on the usage of Joern and Joern server may be found on the Joern microsite.

Releases

Pre-built instances of the Joern command-line tools may be found here.

It is recommended you install the prebuilt Joern tooling by running the install script.

To run the Joern tools, you must have version 8 or above of the Java Runtime Environment installed.

Migrations

Joern 1.1.1 introduced a major rearchitecture of the cpg query language (CPGQL) - please make sure to read upgrade guide