First release to be published in the official Semgrep registry.
Changed
- Add the deep expression operator in some patterns (
incorrect-order-setuid-setgid,regex-dos). - Optimize memory allocation patterns (
mismatched-memory-management,mismatched-memory-management-cpp,unchecked-ret-malloc). - Remove trailing semicolon from some detection patterns (
incorrect-use-of-memset,mismatched-memory-management,mismatched-memory-management-cpp,putenv-stack-var,unsafe-strlen). - Change language in
bad-wordsfromgenerictoregexto improve performance. - Refactor the directory tree to simplify integration with the official Semgrep registry.
- Add link to the official Semgrep registry to the documentation.
- Generally improve code samples and documentation.
Security
- Pin all action references to hashes and add zizmor GitHub workflow.