flow

type Sink struct {
	Package     string   // Package name (e.g., "os", "net/http", "database/sql")
	Function    string   // Function name (e.g., "Open", "Exec", "Get")
	MatchArgs   []int    // Indexes of arguments that must be checked for taint
	Description string   // Short description of the sink behavior
	Tags        []string // Tags: "fs", "net", "cmd", "sql", etc.
}

type SinkRegistry struct {
	// contains filtered or unexported fields
}

type Source struct {
	Package     string   // Package name (e.g., "net/http", "os")
	Function    string   // Function name (e.g., "FormValue", "Getenv")
	Description string   // Short description of the source behavior
	Tags        []string // Tags: "http", "env", "fs", etc.
}

type SourceRegistry struct {
	// contains filtered or unexported fields
}

type TaintEngine struct {
	Sources *SourceRegistry
	Sinks   *SinkRegistry
	Issues  []TaintIssue
	// contains filtered or unexported fields
}

type TaintIssue struct {
	SourcePos token.Pos
	SinkPos   token.Pos
	Source    string
	Sink      string
	Trace     []token.Pos
}