UndREST-SpecQL is the static-analysis backbone of the UndREST toolchain. It queries and inspects Azure REST specifications to expose high-value behavioral and security signals.
What it does
- Scans Azure REST specs with CodeQL and built-in analyzers
- Builds structured operation indexes consumed by APISpy
- Detects patterns linked to risky authorization and data-exposure paths
Why it matters
Specification-level visibility helps detect classes of issues before they are exploited in live environments. SpecQL provides the reference model that makes runtime classification useful.