codepropertygraph 0.0.9

A Python implementation of a Code Property Graph.

Code Property Graph

This library is an implementation of a Code Property Graph as seen in the paper published by Fabian Yamaguchi on Modeling and Discovering Vulnerabilities with Code Property Graphs

A code property graph is a highly efficient data structure designed to mine large codebases for similar programming patterns. The data structure can be loaded into a graph database where properties of code can be queried. Code property graphs are intended to be code-agnostic and highly scalable making it one of the best choices for code representation.

Running as a Library

Installation

Requires:

• Python 3
• pip3

pip install codepropertygraph

Using the code as a library

from codepropertygraph import CPG

code = """a = 1; b = 2; print(a + b)"""

graph = CPG(code)
print(graph)

> Graph(Nodes(a, b), Edges([a, b]))

Running from Source

Setting up Neo4J locally

1. Download Neo4J Desktop v4.4.5 to create local graph databases locally and remotely from your desktop. If the latest version has changed, use this link to download the version used for development.
2. Create a new project and a new local graph database as shown below. It might take a few moments to finish loading.
3. Start the database. Make sure the DB is active before heading onto the Installation and Running the application sections.

Starting the database	Active Database

Installation

To install the repository, you need to clone it and run it inside a virtual environment. Running main.py generates a Code Property Graph of the simple addition script inside examples/ and saves it to output/.

git clone https://github.com/markgacoka/codepropertygraph.git
cd codepropertygraph

python3 -m venv venv
source venv/bin/activate
pip install -r requirements.txt

Running the Application

python main.py

Testing

pytest tests

For first time contributors, read the CONTRIBUTING page.