Marius CiepluchandClaude Opus 5 9c50e17c11 fix(cpg): retry a failed build through the language frontend ...

Scanning a 637-file WordPress plugin reported 1577 regions with 0 scanned
and `cpg_build_failed`. The build was not slow or out of memory -- it
failed in 42 seconds -- and `php2cpg` run directly on the same tree
produced a 4.3MB CPG with no errors at all.

The difference is that `joern-parse` detects the language and then shells
out to the frontend in a separate process. On this tree it got as far as
applying overlays and then threw, while still writing an unusable cpg.bin.
Joern's own output recommends the direct route for a large codebase:

  "Invoking CPG generator in a separate process... If you are importing a
   large codebase (and/or running into memory issues), please try:
   invoke the frontend: php2cpg -J-Xmx3072m /tmp/src -o cpg.bin"

So a failed `joern-parse` now retries through `<language>2cpg`, with the
driver passing the dominant region language. A language with no mapping
fails closed exactly as before -- no guessing at a frontend name.

This is the documented fallback rather than a workaround, and it was
diagnosed rather than assumed: the standalone build was run first, and only
after it succeeded on the identical tree was the retry added.

Gates byte-identical.

Co-Authored-By: Claude Opus 5 (1M context) <[email protected]>
Claude-Session: https://claude.ai/code/session_01T7XD7x5KonMdmGRkp63EQG

2026-09-09 16:19:32 +02:00

..

__init__.py

feat(model-grounded-detection): group 1, subtract the noise architecture

2026-09-08 12:15:54 +02:00

audit.py

feat(contributor-scan): 1.1 regions from entry points, 1.2 the repository driver

2026-09-09 07:28:30 +02:00

calibrate.py

fix(ci): run ruff format, and record run 5 at 90% pair-correct

2026-09-08 19:46:58 +02:00

candidates.py

fix(model-grounded-detection): two modelling bugs the first live Joern run exposed

2026-09-08 12:45:42 +02:00

config_value.py

feat(model): first repository measurement, and the four things it found

2026-09-09 08:46:21 +02:00

dominance.py

feat(model): an access-control finding names a line, and what the PDG does not give us

2026-09-09 13:09:47 +02:00

endpoint.py

feat(model-grounded-detection): group 1, subtract the noise architecture

2026-09-08 12:15:54 +02:00

execution.py

feat(model-grounded-detection): group 6, the execution tier as a seam not a build

2026-09-08 16:58:03 +02:00

judge.py

fix(ci): run ruff format, and record run 5 at 90% pair-correct

2026-09-08 19:46:58 +02:00

ladder.py

feat(model): a region that spans the flow, not just a function

2026-09-09 09:27:19 +02:00

pipeline.py

feat(model): one defect is one finding, however many regions reach it

2026-09-09 15:56:01 +02:00

regions.py

feat(model): an endpoint its contract declares open carries no obligation

2026-09-09 15:39:58 +02:00

report.py

feat(reports): say what was looked for, and what cannot be decided

2026-09-09 15:08:01 +02:00

scan.py

fix(cpg): retry a failed build through the language frontend

2026-09-09 16:19:32 +02:00

shipped.py

feat(model): let the project say what it ships, and rank that first

2026-09-09 12:45:21 +02:00

specs.py

feat(model): a bound on the data lowers the rung, it does not clear it

2026-09-09 13:01:30 +02:00

taint.py

feat(model): one finding per sink site, and WordPress's registration model

2026-09-09 14:30:48 +02:00

taxonomy.py

feat(reports): say what was looked for, and what cannot be decided

2026-09-09 15:08:01 +02:00