Introducing Radar: Extensible Static Analysis for Solana Programs
summary
An open source static analyzer for Solana programs that scans Rust source by parsing the AST with the Rust syn AST parsing pipeline and runs via a Docker CLI + API microservice; detectors are written as Python templates that use provided helper functions to abstract away manual AST traversal. Integrates with GitHub Actions and outputs machine- and human-readable reports. Team chooses AST over bytecode/IR to keep patterns close to source and ships reusable building blocks for dataflow- and behavior-style detectors.
AI-written summary · about
chapters (8)
- 0:00Radar introduction
- 1:30Radar static analysis
- 2:53Radar CLI and server
- 4:57GitHub workflow integration
- 5:59Custom detectors
- 8:09AST approach
- 10:41Detector helpers
- 12:06Python for templates
related talks
39mPractical Static Analysis for Continuous Application Security
30mSmart-Contract Security 201: Auditing Lessons for Solana Founders
25mHow to select between SAST, DAST, IAST, RASP, and AST
44mSecurity Research with Open Source Software: Vol. Omega
44mUsing Static Analysis Tools to Become A Superhero Programmer
25mAre we *actually* IDE yet? A look on the Rust IDE Story
57mRoslyn: The Craft of Static Analysis
54mA Shock to the System Static Analysis for Real AppSec