Tag library calls

Signed-off-by: Prabhu Subramanian <[email protected]>
AppThreat · Nov 28, 2023 · 6d0e1ae · 6d0e1ae
1 parent 22b40ed
commit 6d0e1ae
Showing 1 changed file with 13 additions and 0 deletions.
diff --git a/platform/frontends/x2cpg/src/main/scala/io/appthreat/x2cpg/passes/taggers/CdxPass.scala b/platform/frontends/x2cpg/src/main/scala/io/appthreat/x2cpg/passes/taggers/CdxPass.scala
@@ -130,13 +130,21 @@ class CdxPass(atom: Cpg) extends CpgPass(atom):
                                         ).newTagNode(
                                           compPurl
                                         ).store()(dstGraph)
+                                        atom.method.fullNameExact(bpkg).callIn(
+                                          NoResolve
+                                        ).newTagNode(
+                                          "library-call"
+                                        ).store()(dstGraph)
                                         atom.method.fullNameExact(bpkg).newTagNode(
                                           compPurl
                                         ).store()(dstGraph)
                                         if !containsRegex(bpkg) then
                                             atom.parameter.typeFullName(s"$bpkg.*").newTagNode(
                                               compPurl
                                             ).store()(dstGraph)
+                                            atom.parameter.typeFullName(s"$bpkg.*").newTagNode(
+                                              "framework-input"
+                                            ).store()(dstGraph)
                                             atom.parameter.typeFullName(s"$bpkg.*").method.callIn(
                                               NoResolve
                                             ).newTagNode(
@@ -148,6 +156,11 @@ class CdxPass(atom: Cpg) extends CpgPass(atom):
                                             ).newTagNode(
                                               compPurl
                                             ).store()(dstGraph)
+                                            atom.parameter.typeFullName(
+                                              s"${Pattern.quote(bpkg)}.*"
+                                            ).newTagNode(
+                                              "framework-input"
+                                            ).store()(dstGraph)
                                             atom.parameter.typeFullName(
                                               s"${Pattern.quote(bpkg)}.*"
                                             ).method.callIn(