Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
-
Updated
Feb 21, 2025 - OCaml
Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
Semgrep rules registry
Define and run pattern-based custom linting rules.
A collection of my Semgrep rules to facilitate vulnerability research.
VULNRΞPO - Free vulnerability report generator and repository, end-to-end encrypted! Templates of issues, CWE,CVE,MITRE ATT&CK,PCI DSS, import Nmap/Nessus/Burp/OpenVAS/Bugcrowd/Trivy, Jira export, TXT/JSON/MARKDOWN/HTML/DOCX report, attachments, automatic changelog, statistics, vulnerability management, bug bounty, super fast pentest reporting !
tool designed for identifying vulnerabilities in open source codebases at scale. It can gather and filter on key repository metrics such as popularity and project size
Generic SAST Library
prevent merging of malicious code in pull requests
An extension to use Semgrep inside Burp Suite.
Manager of third-party sources of Semgrep rules 🗂
This project is deprecated. Use https://github.com/returntocorp/semgrep instead
🌐 Visualize and explore IaC ✒️ Create and share notes in VS Code 🤝 Sync notes and findings in real-time with friends
Focused malicious code detection optimizing the protection-to-noise ratio
Semgrep extension for Visual Studio Code
GitHub Actions CI/CD - Master Template & Reusable Workflows Library - Docker Builds, AWS, Python, Terraform, Jenkins, Linting, Security Scanning, Make Builds etc.
Semgrep-based Policy Controller for Kubernetes
Add a description, image, and links to the semgrep topic page so that developers can more easily learn about it.
To associate your repository with the semgrep topic, visit your repo's landing page and select "manage topics."