Pysa: An open source static analysis tool to detect and prevent security issues in Python code

Pysa: An open source static analysis tool to detect and prevent security issues in Python code Today, we are sharing details about Pysa, an open source static analysis tool we’ve built to detect and prevent security and privacy issues in Python code. Last year, we shared how we built Zoncolan, a static analysis tool that helps us analyze more than 100 million lines of Hack code and has helped engi

[legoboku]

“Pysa is a security-focused tool built on top of our type checker for Python, Pyre. It’s used to look at code and analyze how data flows through it. Analyzing data flows is useful because many security and privacy issues can be modeled as data flowing into a place it shouldn’t.”

[suzukiMY]

タイプ（型）チェッカーの Pyre 上に構築された、セキュリティにフォーカスした静的分析ツール

[misshiki]

“Pysa：Pythonコードのセキュリティ問題を検出して防止するためのオープンソースの静的分析ツール”

[tmatsuu]

わいわい

[efcl]

Taint Analysisも入ってる https://pyre-check.org/docs/pysa-basics.html

[braitom]

Facebook製のPythonのセキュリティ、プライバシー問題を検出する静的分析ツールPysaについて。仕組み、制約、誤検知に対する対応方針について書かれている。

[Surgo]

fb 製の python 静的解析ツール