code2DFD | automatically extract dataflow diagrams

code2DFD is a Python library. code2DFD has no bugs, it has no vulnerabilities, it has build file available and it has low support. You can download it from GitHub.

Code2DFD can automatically extract dataflow diagrams (DFDs) that are enriched with security-relevant annotations from the source code of microservice applications. It is structured as a framework, where the technology-specific extractors in technology_specific_extractors/ are executed and detect evidence for DFD items in the code. They use some general functionality from core/. Before running the tool, Python version 3.x and the packages specified in requirements.txt need to be installed. The path to the application that is to be analysed can be written in the config/config.ini file or given as parameter (see 2.). A number of repositories is already given in that file, for all of which a manually created DFD exists here. The corresponding path only needs to be un-commented for analysis (all others have to be commented out with a ";"). To start the tool via the terminal, simply enter python3 code2DFD.py in a command line opened in the root directory. The extraction will start and some status messages appear on the screen. Alternatively, the repository path can be given as parameter: python3 code2DFD.py repository/path. Path as parameter overrules path in config-file. Once the analysis is finished, the results can be found in the output/ folder. To run the tool as a RESTful API service, run python3 flask_code2DFD.py. This will spawn up a Flask server and you can trigger DFD-extractions by sending a request to or opening your browser at localhost:5000/dfd?path=*repository/path*.