GitHub - lzaoral/csmock: A tool for static analysis, dynamic analysis, and formal verification of RPM packages

lzaoral / csmock Public

forked from csutils/csmock

Notifications You must be signed in to change notification settings
Fork 0
Star 0

A tool for static analysis, dynamic analysis, and formal verification of RPM packages

GPL-3.0 license

0 stars 20 forks Branches Tags Activity

Star

Notifications

Branches Tags

Name		Name	Last commit message	Last commit date
Latest commit History 715 Commits
doc		doc
py		py
scripts		scripts
.gitignore		.gitignore
CMakeLists.txt		CMakeLists.txt
COPYING		COPYING
Makefile		Makefile
README		README
cwe-map.csv		cwe-map.csv
make-srpm.sh		make-srpm.sh
upload-release.sh		upload-release.sh

Repository files navigation

csmock
======
csmock is a tool for scanning SRPMs by Static Analysis tools in a fully
automated way.  You can find the up2date sources in the following repository:

    https://github.com/csutils/csmock

csmock is licensed under GPLv3+, see COPYING for details.  Please report bugs
and feature requests on GitHub using the above URL.


Dependences
-----------
    * csdiff (non-interactive tools for processing scan results in plain-text)

    * cswrap (generic compiler wrapper that captures diagnostic messages)

    * mock (chroot-based tool for building RPMs)


RPM-based Installation
----------------------
    ./make-srpm.sh

    rpmbuild --rebuild ./csmock-*.src.rpm

    sudo dnf install ...


Documentation
-------------
See the 'csmock(1)' man page for the usage of csmock itself.  The output
of 'csmock --help' additionally includes the command-line options handled
by csmock plug-ins.  A higher-level description can be found in the Flock
2014 presentation about csmock:

    https://kdudka.fedorapeople.org/static-analysis-flock2014.pdf