Skip to content

Instantly share code, notes, and snippets.

@conikeec
Created June 5, 2019 21:14
Show Gist options
  • Save conikeec/54a61c1ed6f94c79b792a83989f40760 to your computer and use it in GitHub Desktop.
Save conikeec/54a61c1ed6f94c79b792a83989f40760 to your computer and use it in GitHub Desktop.
# Initiate an Ocular interaction session using the following command
./ocular.sh --import scripts/deps.sc
# We will be analyzing the project - jackspoilt
# Create CPG for the application (that was built in prior step)
ocular> createCpgAndSp("<projectFolder>/build/libs/jackspoilt-1.0-SNAPSHOT.jar")
ocular> loadCpg("jackspoilt-1.0-SNAPSHOT.jar")
# Check if the CPG is successfully createed and loaded in active workspace
ocular> workspace
| name | overlays | loaded|
|=========================================================================================|
| jackspoilt-1.0-SNAPSHOT.jar | semanticcpg(l),tagging(l),securityprofile(l)| true |
# Fetch Software Composition for the project that we are analyzing (specify the target folder of project)
ocular> DependencyParser.getDependencies(<projectFolder>)
# Display Software Composition for active project
ocular> cpg.dependency.l
(9118560990992800791L, "2.8.7", "jackson-core", Some("com.fasterxml.jackson.core")),
(9118560990992800790L, "9.4.8.v20171121", "websocket-common", Some("org.eclipse.jetty.websocket")),
(9118560990992800789L, "9.4.8.v20171121", "jetty-http", Some("org.eclipse.jetty")),
(9118560990992800788L, "1.2.3", "logback-classic", Some("ch.qos.logback")),
(9118560990992800787L, "9.4.8.v20171121", "jetty-xml", Some("org.eclipse.jetty")),
(9118560990992800786L, "1.3.04", "xml-apis", Some("xml-apis")),
(9118560990992800785L, "9.4.8.v20171121", "jetty-io", Some("org.eclipse.jetty")),
(9118560990992800784L, "1.7.25", "slf4j-api", Some("org.slf4j")),
(9118560990992800799L, "9.4.8.v20171121", "jetty-webapp", Some("org.eclipse.jetty")),
(9118560990992800798L, "9.4.8.v20171121", "jetty-util", Some("org.eclipse.jetty")),
(9118560990992800797L, "1.2.3", "logback-core", Some("ch.qos.logback")),
(9118560990992800796L, "1.1.1", "json-simple", Some("com.googlecode.json-simple")),
(9118560990992800795L, "2.7.2", "xalan", Some("xalan")),
(9118560990992800794L, "9.4.8.v20171121", "jetty-server", Some("org.eclipse.jetty")),
(9118560990992800793L, "9.4.8.v20171121", "websocket-servlet", Some("org.eclipse.jetty.websocket")),
(9118560990992800792L, "9.4.8.v20171121", "jetty-security", Some("org.eclipse.jetty")),
(9118560990992800783L, "9.4.8.v20171121", "websocket-client", Some("org.eclipse.jetty.websocket")),
(9118560990992800782L, "2.7.2", "spark-core", Some("com.sparkjava")),
(9118560990992800781L, "9.4.8.v20171121", "websocket-server", Some("org.eclipse.jetty.websocket")),
(9118560990992800780L, "1.0", "jcip-annotations", Some("net.jcip")),
(9118560990992800779L, "9.4.8.v20171121", "jetty-servlet", Some("org.eclipse.jetty")),
(9118560990992800807L, "1.1", "hamcrest-core", Some("org.hamcrest")),
(9118560990992800806L, "9.4.8.v20171121", "websocket-api", Some("org.eclipse.jetty.websocket")),
(9118560990992800805L, "2.8.0", "jackson-annotations", Some("com.fasterxml.jackson.core")),
(9118560990992800804L, "2.7.2", "serializer", Some("xalan")),
(9118560990992800803L, "3.1.0", "javax.servlet-api", Some("javax.servlet")),
(9118560990992800802L, "4.10", "junit", Some("junit")),
(9118560990992800801L, "2.8.7", "jackson-databind", Some("com.fasterxml.jackson.core")),
(9118560990992800800L, "9.4.8.v20171121", "jetty-client", Some("org.eclipse.jetty"))
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment