azure / confidential-computing-cvm-guest-attestation

Analysis scope, overview of main, test, generated, deployment, build, and other code.

Source Code Analysis Scope

Files includes and excluded from analyses

txt

vcxproj

proj

nuspec

15 extensions are included in analyses: h, cpp, txt, md, sh, vcxproj, ps1, proj, cmake, gitignore, json, nuspec, yaml, dockerfile, py
4 criteria are used to exclude files from analysis:

exclude files with path like ".*/[.][a-zA-Z0-9_]+.*" (Hidden files and folders) (2 files).
exclude files with path like ".*/git[-]history[.]txt" (Git history) (1 file).
exclude files with path like ".*/git[-][a-zA-Z0-9_]+[.]txt" (Git data exports for sokrates analyses) (0 files).
exclude files with path like ".*/extern(al)?/.*" (Dependencies) (36 files).

The source code folder contains 266 files:

205 files are included in analyses.
61 files are excluded from analyses:

Explore all files....

Overview of Analyzed Files

Basic stats on analyzed files

Intro

For analysis purposes we separate files in scope into several categories: main, test, generated, deployment and build, and other.

The main category contains all manually created source code files that are being used in the production.
Files in the main category are used as input for other analyses: logical decomposition, concerns, duplication, file size, unit size, and conditional complexity.
Test source code files are used only for testing of the product. These files are normally not deployed to production.
Build and deployment source code files are used to configure or support build and deployment process.
Generated source code files are automatically generated files that have not been manually changed after generation.
While a source code folder may contain a number of files, we are primarily interested in the source code files that are being written and maintained by developers.
Files containing binaries, documentation, or third-party libraries, for instance, are excluded from analysis. The exception are third-party libraries that have been changed by developers.

159 files

3 files

9 files

34 files

Main Code

All manually created or maintained source code that defines logic of the product that is run in a production environment.

vcxproj

proj

Explore: circles | sunburst

The following criteria are used to filter files:

files with paths like ".*".

159 files match defined criteria (16,401 LOC, 100.0% vs. main code):

62 *.cpp files (10,948 LOC)
73 *.h files (2,891 LOC)
7 *.vcxproj files (1,225 LOC)
6 *.ps1 files (735 LOC)
1 *.py files (502 LOC)
4 *.cmake files (43 LOC)
5 *.proj files (29 LOC)
1 *.yaml files (28 LOC)

" *.cpp" is biggest, containing 66.75% of LOC.
" *.yaml" is smallest, containing 0.17% of LOC.

Test Code

Used only for testing of the product. Normally not deployed in a production environment.

Explore: circles | sunburst

The following criteria are used to filter files:

files with paths like ".*/[Tt]ests/.*".
files with paths like ".*_tests[.].*".
files with paths like ".*/test[.].*".

3 files match defined criteria (173 LOC, 1.1% vs. main code):

2 *.cpp files (143 LOC)
1 *.sh files (30 LOC)

" *.cpp" is biggest, containing 82.66% of LOC.
" *.sh" is smallest, containing 17.34% of LOC.

Build and Deployment Code

Source code used to configure or support build and deployment process.

nuspec

Explore: circles | sunburst

The following criteria are used to filter files:

files with paths like ".*[.]sh".
files with paths like ".*[.]git[a-z]+".
files with paths like ".*/[.]gitignore".
files with paths like ".*[.]nuspec".

9 files match defined criteria (244 LOC, 1.5% vs. main code):

7 *.sh files (211 LOC)
2 *.nuspec files (33 LOC)

" *.sh" is biggest, containing 86.48% of LOC.
" *.nuspec" is smallest, containing 13.52% of LOC.

Other Code

txt

Explore: circles | sunburst

The following criteria are used to filter files:

files with paths like ".*[.]md".
files with paths like ".*/README[.][a-z0-9]+".
files with paths like ".*/[.]gitignore".
files with paths like ".*[.]json".
files with paths like ".*[.]txt".

34 files match defined criteria (1,866 LOC, 11.4% vs. main code):

12 *.md files (654 LOC)
2 *.json files (649 LOC)
20 *.txt files (563 LOC)

" *.md" is biggest, containing 35.05% of LOC.
" *.txt" is smallest, containing 30.17% of LOC.

Analyzers

Info about analyzers used for source code examinations.

*.cpp files are analyzed with CppAnalyzer:

All basic standard analyses supported (source code overview, duplication, file size, concerns, findings, metrics, controls)

Advanced code cleaning (empty lines and comments removed for LOC calculations, additional cleaning for duplication calculations)

Unit size analysis

Conditional complexity analysis

Advanced heuristic dependency analysis

*.h files are analyzed with CppAnalyzer:

All basic standard analyses supported (source code overview, duplication, file size, concerns, findings, metrics, controls)

Advanced code cleaning (empty lines and comments removed for LOC calculations, additional cleaning for duplication calculations)

Unit size analysis

Conditional complexity analysis

Advanced heuristic dependency analysis

*.vcxproj files are analyzed with XmlAnalyzer:

All basic standard analyses supported (source code overview, duplication, file size, concerns, findings, metrics, controls)

Advanced code cleaning (empty lines and comments removed for LOC calculations, additional cleaning for duplication calculations)

No unit size analysis

No conditional complexity analysis

No dependency analysis

*.ps1 files are analyzed with DefaultLanguageAnalyzer:

All basic standard analyses supported (source code overview, duplication, file size, concerns, findings, metrics, controls)

Basic code cleaning (empty lines removed for LOC calculations and duplication calculations)

No unit size analysis

No conditional complexity analysis

No dependency analysis

*.py files are analyzed with PythonAnalyzer:

All basic standard analyses supported (source code overview, duplication, file size, concerns, findings, metrics, controls)

Advanced code cleaning (empty lines and comments removed for LOC calculations, additional cleaning for duplication calculations)

Unit size analysis

Conditional complexity analysis

Basic heuristic dependency analysis

*.cmake files are analyzed with DefaultLanguageAnalyzer:

All basic standard analyses supported (source code overview, duplication, file size, concerns, findings, metrics, controls)

Basic code cleaning (empty lines removed for LOC calculations and duplication calculations)

No unit size analysis

No conditional complexity analysis

No dependency analysis

*.proj files are analyzed with XmlAnalyzer:

All basic standard analyses supported (source code overview, duplication, file size, concerns, findings, metrics, controls)

Advanced code cleaning (empty lines and comments removed for LOC calculations, additional cleaning for duplication calculations)

No unit size analysis

No conditional complexity analysis

No dependency analysis

*.yaml files are analyzed with YamlAnalyzer:

All basic standard analyses supported (source code overview, duplication, file size, concerns, findings, metrics, controls)

Advanced code cleaning (empty lines and comments removed for LOC calculations, additional cleaning for duplication calculations)

No unit size analysis

No conditional complexity analysis

No dependency analysis

2025-05-06 22:31