Skip to content

Improve Java static reachability for JDBC drivers

Problem

JDBC drivers are commonly loaded through dynamic patterns that bypass static analysis, resulting in them being marked as not_found in static reachability analysis.

Proposal

Implement heuristics to detect JDBC driver usage by:

  • Detecting hardcoded JDBC URLs in configuration files and Java code
  • Creating mappings between JDBC URL patterns and their corresponding driver packages (e.g., jdbc:mysql://mysql-connector-j)

Related

Parent epic: &19692

Edited by 🤖 GitLab Bot 🤖