From 358e95c7f0c9b4e0139da1bfddec81f94c3f839d Mon Sep 17 00:00:00 2001 From: seqradev Date: Fri, 30 Jan 2026 00:03:26 +0300 Subject: [PATCH 1/2] Add Seqra static analyzer Add scripts/runSeqra.sh using Docker-based approach --- scripts/runSeqra.sh | 21 +++++++++++++++++++++ 1 file changed, 21 insertions(+) create mode 100755 scripts/runSeqra.sh diff --git a/scripts/runSeqra.sh b/scripts/runSeqra.sh new file mode 100755 index 0000000000..6278c3d771 --- /dev/null +++ b/scripts/runSeqra.sh @@ -0,0 +1,21 @@ +#!/usr/bin/env bash + +# Check for install/updates at https://github.com/seqra/seqra + +source scripts/requireCommand.sh + +requireCommand docker + +docker pull ghcr.io/seqra/seqra + +benchmark_version=$(scripts/getBenchmarkVersion.sh 2>/dev/null | tail -1) +seqra_version=$(docker run --rm ghcr.io/seqra/seqra seqra --version | grep -oE 'v[0-9]+\.[0-9]+\.[0-9]+') +result_file="/project/results/Benchmark_$benchmark_version-Seqra-$seqra_version.sarif" + +docker run --rm -v $(pwd):/project \ + ghcr.io/seqra/seqra:latest \ + seqra scan \ + --severity error \ + --severity warning \ + --severity note \ + --output "$result_file" /project From 09f7701d0da2148ae25824699b5d7baee1ba1b0c Mon Sep 17 00:00:00 2001 From: seqradev Date: Tue, 31 Mar 2026 01:41:32 +0300 Subject: [PATCH 2/2] Rename Seqra to OpenTaint in benchmark run script --- scripts/runOpenTaint.sh | 21 +++++++++++++++++++++ scripts/runSeqra.sh | 21 --------------------- 2 files changed, 21 insertions(+), 21 deletions(-) create mode 100644 scripts/runOpenTaint.sh delete mode 100755 scripts/runSeqra.sh diff --git a/scripts/runOpenTaint.sh b/scripts/runOpenTaint.sh new file mode 100644 index 0000000000..64c61a3135 --- /dev/null +++ b/scripts/runOpenTaint.sh @@ -0,0 +1,21 @@ +#!/usr/bin/env bash + +# Check for install/updates at https://github.com/seqra/opentaint + +source scripts/requireCommand.sh + +requireCommand docker + +docker pull ghcr.io/seqra/opentaint + +benchmark_version=$(scripts/getBenchmarkVersion.sh 2>/dev/null | tail -1) +opentaint_version=$(docker run --rm ghcr.io/seqra/opentaint opentaint --version | grep -oE 'v[0-9]+\.[0-9]+\.[0-9]+' || docker run --rm ghcr.io/seqra/opentaint opentaint --version | awk '{print $NF}') +result_file="/project/results/Benchmark_$benchmark_version-OpenTaint-$opentaint_version.sarif" + +docker run --rm -v $(pwd):/project \ + ghcr.io/seqra/opentaint:latest \ + opentaint scan \ + --severity error \ + --severity warning \ + --severity note \ + --output "$result_file" /project diff --git a/scripts/runSeqra.sh b/scripts/runSeqra.sh deleted file mode 100755 index 6278c3d771..0000000000 --- a/scripts/runSeqra.sh +++ /dev/null @@ -1,21 +0,0 @@ -#!/usr/bin/env bash - -# Check for install/updates at https://github.com/seqra/seqra - -source scripts/requireCommand.sh - -requireCommand docker - -docker pull ghcr.io/seqra/seqra - -benchmark_version=$(scripts/getBenchmarkVersion.sh 2>/dev/null | tail -1) -seqra_version=$(docker run --rm ghcr.io/seqra/seqra seqra --version | grep -oE 'v[0-9]+\.[0-9]+\.[0-9]+') -result_file="/project/results/Benchmark_$benchmark_version-Seqra-$seqra_version.sarif" - -docker run --rm -v $(pwd):/project \ - ghcr.io/seqra/seqra:latest \ - seqra scan \ - --severity error \ - --severity warning \ - --severity note \ - --output "$result_file" /project