ossf / package-analysis

Open Source Package Analysis

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Create new dynamic analysis phase for code execution

maxfisher-g opened this issue · comments

#730 was implemented as part of the import phase, but for detection reasons, it would be better to have it as a separate phase.

This involves:

  1. Adding a new dynamic analysis run phase
  2. Adjusting the JSON schema for dynamic analysis. The results for each phase should probably be represented as a list of repeated structs rather than multiple / duplicate nested structs
  3. migrating existing JSON dynamic analysis data over to the new format