godzilla

Overview ¶

Command godzilla is the CLI entry point for the Godzilla SAST tool.

The "scan" command converts a source directory into gIR (Godzilla's language-agnostic intermediate representation), runs the taint analysis engine over it using the built-in rule set (plus any user rules), prints the findings, and sets an exit code suitable for a CI/CD quality gate.