antgroup / antgroup/YASA-Engine

【OSCP】YASA-框架解析引擎开发任务

Open
#64 4 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

OSCP
Dominant language
TypeScript
Stars
323
Forks
40
PR merge metrics
No merged PRs in 30d

Description

此 ISSUE 为 [YASA开源共建计划(YASA Open Source Contribution Plan,简称 YASA OSCP)] 任务 ISSUE,欢迎社区开发者参与共建~ YASA共建计划
若有感兴趣想要认领的任务,但还未报名,辛苦先完成添加微信小助手"YASA1024"后进行哈~

任务名称:【OSCP】YASA-框架解析引擎开发任务

方向:框架语法解析与适配支持
任务难度:🌟 🌟 🌟(3-5星,根据框架复杂度动态调整)
期望完成时间:2-3周
参与规则:每个框架限一人开发,以GitHub回复时间为准

任务描述

扩展YASA对流行框架的解析能力,提升在真实项目中的代码分析覆盖度与准确性。

测试验证

示例
框架适配测试报告

测试覆盖范围

  • 基础语法解析正确性
  • 框架特有Entrypoint/source/传播逻辑/sink适配规则等适配
  • 数据流跟踪准确性

性能指标

  • 解析速度:检测耗时合理
  • 内存占用:合理内存使用率
  • 准确率:API识别准确率≥95%

测试项目

  • 真实开源项目(≥2个)
难度评级标准
  • 🌟🌟🌟 标准适配:基础复杂度框架(3星)
  • 🌟🌟🌟🌟 深度适配:中型复杂框架(4星)
  • 🌟🌟🌟🌟🌟 全栈适:大型复杂框架(5星)
质量要求
  • 保证解析准确性与稳定性
  • 提供详细的使用文档
  • 通过全部集成测试用例
  • 提供完整技术文档
认领流程
  1. 在本Issue下方回复:GitHub ID+【框架适配】 + 【语言】+ 【框架名】
    (示例:@github-user + 框架适配 + CVE-2023-12234)
  2. YASA小助手将在1个工作日内:
  • 检查是否重复:如重复则回复"该框架适配已被认领,请选择其他框架"
  • 如未重复:回复"认领成功,欢迎贡献"
提交方式
  • Fork仓库并创建特性分支
  • 遵循代码规范
  • 编写测试用例验证检测效果
  • 确保检测准确性和性能

欢迎社区专家参与适配开发!一起扩展YASA的框架支持能力!

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

The issue does not name files, entry points, or specific test cases. Start by locating the framework parsing and adaptation components in the YASA-Engine repository, then review existing integration tests and framework adapters. Done means supporting one selected framework, documenting the adaptation, passing integration tests, and reporting results for at least two real open-source projects.

Written by the indexing model from the issue text.

Assessment

Tech stack
typescript
Domain
compilers, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Quiet
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.