find_reachable_sinks
Finds taint sinks reachable from entry points via CALLS edges, showing only sinks whose caller method is reachable. Optionally returns all sinks when show_all is True.
Instructions
Return taint sinks reachable from entry points via CALLS edges.
When show_all=False (default), only returns sinks reachable from an entry
point. When show_all=True, returns all sinks (same as find_taint_sinks).
Uses BFS from all entry points through CALLS edges to build a reachable
method ID set, then filters find_taint_sinks results to only those whose
caller method is reachable from an entry point.
Args:
repo_name: Repository to analyse.
show_all: When True, skip reachability filtering and return all sinks.
Returns:
List of dicts with keys ``caller_fqn``, ``sink_method``, ``file_path``,
``line_start``, ``sink_category``.Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| repo_name | Yes | ||
| show_all | No |
Output Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |