Semgrep
Static analysis that reads like the code it checks
2 comments
About Semgrep
Semgrep finds bugs and insecure patterns using rules written in the syntax of the target language, so a rule looks like the code it matches. It covers many languages, ships a large community rule set, and runs in CI or on a developer machine.
Comments (2)
- Seb Kovac4mo ago
Rules that look like the code they match. Writing a custom rule takes minutes instead of learning an ast.
- Dave Raman1mo ago
The practical answer: V1.177.0 and they ship roughly weekly. The community rule set keeps growing.
Sign in to leave a comment.
