Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
-
Updated
Sep 20, 2025 - OCaml
#
semgrep
Here are 91 public repositories matching this topic...
Semgrep Community Edition rules, maintained by Semgrep and the community. Free to use under the Semgrep Rules License.
security static-analysis program-analysis security-scanner grep-like semgrep semgrep-rules semgrep-registry
-
Updated
Sep 21, 2025 - HCL
Define and run pattern-based custom linting rules.
-
Updated
Feb 20, 2025 - Go
A collection of my Semgrep rules to facilitate vulnerability research.
-
Updated
Aug 18, 2025 - C
VULNRΞPO - Free vulnerability report generator and repository, end-to-end encrypted! Templates of issues, CWE,CVE,MITRE ATT&CK,PCI DSS, import Nmap/Nessus/Burp/OpenVAS/Bugcrowd/Trivy, Jira export, TXT/JSON/MARKDOWN/HTML/DOCX, attachments, automatic changelog, stats, vulnerability management, bugbounty, local ai/llm, super fast pentest reporting!
security reporting hacking owasp pci-dss pentesting vulnerabilities bugbounty nessus openvas burpsuite end-to-end-encryption asvs zaproxy security-tool reporting-tool trivy pentest-report semgrep ollama
-
Updated
Sep 17, 2025 - TypeScript
Prevent merging of malicious code in pull requests
obfuscation static-analysis pull-request github-app security-tools cloud-security security-review malware-detection security-rules code-security malicious-code supply-chain-security semgrep semgrep-rules dynamic-execution code-integrity security-scan block-merging cicd-security opengrep
-
Updated
Mar 20, 2025 - Python
tool designed for identifying vulnerabilities in open source codebases at scale. It can gather and filter on key repository metrics such as popularity and project size
cli security-audit static-code-analysis owasp vulnerability-scanners security-scanner sast security-research vulnerability-research semgrep
-
Updated
Feb 6, 2025 - Go
-
Updated
Nov 5, 2024 - Java
Generic SAST Library
security regex static-analyzer appsec codeanalysis staticanalysis sast semgrep semanticgrep patternmatch genericsast libsast
-
Updated
Jun 17, 2025 - Python
Focused malicious code detection ruleset, with a high protection-to-noise ratio
security obfuscation detection malware ruleset appsec devsecops cloud-security malware-detection code-security malicious-code supply-chain-security semgrep semgrep-rules dynamic-execution code-integrity security-scan malicious-detection cicd-security opengrep
-
Updated
Feb 24, 2025 - Python
An extension to use Semgrep inside Burp Suite.
-
Updated
May 23, 2025 - Java
Manager of third-party sources of Semgrep rules 🗂
-
Updated
Jul 21, 2024 - Python
GitHub Actions CI/CD - Master Template & Reusable Workflows Library - Docker Builds, AWS, Python, Terraform, Jenkins, Linting, Security Scanning, Make Builds etc.
github python docker jenkins aws library linting terraform ci-cd make cicd ci-cd-pipeline security-scanning github-actions github-actions-ci tfsec checkov semgrep
-
Updated
Apr 2, 2025 - Shell
🌐 Visualize and explore IaC ✒️ Create and share notes in VS Code 🤝 Sync notes and findings in real-time with friends
-
Updated
Feb 2, 2024 - TypeScript
This project is deprecated. Use https://github.com/returntocorp/semgrep instead
-
Updated
Apr 9, 2024 - Python
Semgrep extension for Visual Studio Code
-
Updated
Sep 18, 2025 - TypeScript
Improve this page
Add a description, image, and links to the semgrep topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the semgrep topic, visit your repo's landing page and select "manage topics."