Automated identification of sensitive data access based on source-code analysis

A non-transitory computer-readable storage medium storing instructions that when executed by a processor of a computing system cause the processor to perform a method, the method comprising:

• determining whether a repository in a source-code management platform is pertinent to security;
• in response the repository being pertinent to security, determining whether a respective source code file in the repository is pertinent to security;
• in response the source code file being pertinent to security:
• determining a set of symbols from the source code file;
• and
• determining, based on the set of symbols, whether the source code file accesses sensitive data;
• and
• in response to the source code file accessing sensitive data, presenting information associated with the source code file in a user interface.

A computer system, comprising:

• a processor;
• a non-transitory computer-readable storage medium storing instructions that when executed by the processing resource cause the computer system to:
• determine whether a repository in a source-code management platform is pertinent to security;
• in response the repository being pertinent to security, determine whether a respective source code file in the repository is pertinent to security;
• in response the source code file being pertinent to security:
• determine a set of symbols from the source code file;
• and
• determine, based on the set of symbols, whether the source code file accesses sensitive data;
• and
• in response to the source code file accessing sensitive data, present information associated with the source code file in a user interface.