# 使用 Homebrew 安装 joern

查看 joern 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。

## 安装

```sh
sudo av install brew:joern
```

其他安装命令:

### macOS

- Homebrew (100%):

```sh
brew install joern
```

  证据: local Homebrew formula metadata

## 软件包事实

- **软件包键:** brew:joern
- **软件包管理器:** Homebrew
- **版本:** 4.0.590
- **来源摘要:** Open-source code analysis platform based on code property graphs
- **主页:** <https://joern.io/>
- **仓库:** <https://github.com/joernio/joern>
- **最后更新:** 2026-07-28T10:31:06Z
- **已生成:** 2026-08-03T19:37:03+00:00

## 可执行文件

- abap2cpg (别名)
- c2cpg.sh (别名)
- csharpsrc2cpg (别名)
- ghidra2cpg (别名)
- gosrc2cpg (别名)
- javasrc2cpg (别名)
- jimple2cpg (别名)
- joern (别名)
- joern-cpg2scpg (别名)
- joern-export (别名)
- joern-flow (别名)
- joern-parse (别名)
- joern-scan (别名)
- joern-slice (别名)
- joern-vectors (别名)
- jssrc2cpg.sh (别名)
- kotlin2cpg (别名)
- php2cpg (别名)
- pysrc2cpg (别名)
- rubysrc2cpg (别名)
- rust2cpg (别名)
- schema-extender.sh (别名)
- swiftsrc2cpg.sh (别名)

## 安装行为

- Bottle: 不可用

## 版本和新鲜度

- 页面生成时间: 2026-08-03
- 管理器版本: 4.0.590
## 项目历史与用法

Joern is an open-source code analysis platform built around code property graphs, a graph representation that lets security researchers query syntax, control flow, and data flow through a Scala-based domain-specific language. Its Homebrew formula packages a large CLI surface, including language frontends and helper commands for parsing, scanning, slicing, exporting, and vectorizing code.

### 项目历史

The code property graph idea was introduced in vulnerability-research work on C system code and the Linux kernel. Joern grew from that research lineage into a practical tool for creating and querying CPGs, with later research from 2014 to 2016 extending the representation and 2017 onward work at ShiftLeft turning the format into a broader static-analysis foundation.

The public joernio/joern repository was created in 2019 and the project documentation records several architectural shifts: older Joern versions used general-purpose graph databases and Gremlin, later versions moved to OverflowDB, Joern v2 changed the implementation line from Scala 2 to Scala 3, and Joern v4 moved from OverflowDB to flatgraph.

### 采用历史

Joern's adoption is strongest in security research and static-analysis workflows where importing incomplete or build-hostile code is valuable. The documentation lists mature or partially mature frontends for C/C++, Java, JavaScript, Python, binary analysis through Ghidra, JVM bytecode, Kotlin, PHP, Go, Ruby, Swift, and C#.

Homebrew distribution makes Joern convenient on macOS and Linux while preserving its JVM/Scala toolchain shape through OpenJDK and sbt-related packaging.

### 使用方式

A typical Joern workflow parses source, bytecode, or binaries into a CPG, stores the graph in Joern's graph database, and then uses CPGQL or bundled commands such as joern-scan, joern-slice, and joern-export to inspect code patterns and vulnerability-relevant flows.

### 为什么软件包爱好者会关心

Joern matters to package nerds because it turns a research-heavy static-analysis stack into a single installable CLI formula with many frontends. It also shows the unusual packaging profile of modern security tooling: JVM runtime, Scala build tooling, external parsers, and a fast-moving release stream tied to graph storage changes.

### 时间线

- 2014: Code property graphs were introduced for vulnerability discovery in C system code.
- 2014-2016: Research extended the CPG concept for interprocedural analysis, data-flow learning, dominator-tree integration, and dynamic-language analysis.
- 2017: The CPG became a foundation for static-analysis products at ShiftLeft.
- 2019: The joernio/joern GitHub repository was created.
- 2023: Joern v2 marked the Scala 2 to Scala 3 transition.
- 2026: Joern v4 documented the move from OverflowDB to flatgraph.

### Related projects

- Related projects and concepts include the Code Property Graph specification, Ocular and Qwiet AI, OverflowDB, flatgraph, Ghidra frontends, and the older Gremlin/property-graph ecosystem that influenced early Joern storage and querying.

### 来源

- <https://api.github.com/repos/joernio/joern>
- <https://cpg.joern.io/>
- <https://docs.joern.io/>
- <https://docs.joern.io/code-property-graph/>
- <https://formulae.brew.sh/formula/joern>
- <https://github.com/joernio/joern>


## 安全说明

没有找到 joern 的匹配本地密钥处理 manifest。Nucleus 软件包元数据仍在此发布，以便未来覆盖拥有稳定的软件包 URL。



## Combined YAML source

View the package source record on GitHub. [combined/joern.yml](https://github.com/mxcl/pkgdb/blob/main/combined/joern.yml)


## 来源

- pkg.so package database
- Geiger risk classifier
- curated package history
- pkgdb category and tag curation
- cross-ecosystem install command graph