Semgrep
No Change
trial
Semgrep. Is a fast static analysis platform for SAST, dependency scanning, and secrets detection across 30+ languages.
Blurb
An extensible developer-friendly application security platform that scans source code to surface true and actionable security issues with AI-assisted SAST, SCA, and Secrets Detection solutions.
Summary
Garden stance: We trial Semgrep for our estate.
Key points:
| Topic | Notes |
|---|---|
| Rule format | YAML rules with metavariables; patterns mirror target language syntax |
| Run modes | IDE, pre-commit, semgrep scan, semgrep ci with managed rules |
| Languages | 30+ including Python, Go, Java, JavaScript, TypeScript, Terraform, YAML |
| Registry | semgrep.dev/r community and vendor rules |
| License | Engine LGPL-2.1; some rules and platform features are commercial |
References
Details
| Topic | Notes |
|---|---|
| Rule format | YAML rules with metavariables; patterns mirror target language syntax |
| Run modes | IDE, pre-commit, semgrep scan, semgrep ci with managed rules |
| Languages | 30+ including Python, Go, Java, JavaScript, TypeScript, Terraform, YAML |
| Registry | semgrep.dev/r community and vendor rules |
| License | Engine LGPL-2.1; some rules and platform features are commercial |
References