variant-analysis
trailofbits5.8k installs
Find where else a known bug hides in your code.
What it does
Finds other instances of a known bug across a codebase and reports which candidates share its root cause.
When to use it
Use after finding a bug or vulnerability to search for related instances, refine security queries, or audit its other manifestations.
How to use it
Give it a known bug in your codebase; it returns a report of confirmed variants, unsuccessful search patterns, and a CI-ready regression rule.
What you provide
- the known bug
- An existing project
Good to know
- starts one helper agent per item, so the count depends on the work
Latest review
What you need · 3
The search guidance directs the agent to use ripgrep for reconnaissance.
The search guidance directs the agent to use Semgrep for iterative pattern searches.
The search guidance directs the agent to use CodeQL for precision.
Access · 0
No additional actions listed.