Data Flow
Data flows are the journey of a data element within the codebase. It maps out the journey of a data element from a source to a sink detected via static code analysis.
A data flow result consists of the following structure:
The structure of all data flow representations is similar. As an example, the following is the structure of a storage sink:
The parameters of the results are explained below:
Field | Description |
| Third parties that are consuming data elements |
| Leakages that are consuming data elements |
| Databases that are consuming data elements |
| Internal APIs that are consuming data elements |
| Miscellaneous data flows |
The parameters of a data flow results are explained below:
Field | Description |
| ID of the source which is processed |
| A list of sinks that are detected in a particular type of sink |
| The type of sink |
| ID of the sink |
| Name of the sink |
| Boolean value indicating if the data element is sensitive |
| A list of paths defining the data flow of the element |
| Unique ID of the path |
| An occurrence of a data element |
| name of the entity in which the data element is processed |
| Line number of the occurance |
| Column number of the occurance |
| Name of the file where the occurrence is detected |
| A dump of the code around the occurrence |
Last updated