Semgrep
Static analysis that reads like the code it checks
Includes 115 simulated benchmark votes2 comments
About Semgrep
Semgrep finds bugs and insecure patterns using rules written in the syntax of the target language, so a rule looks like the code it matches. It covers many languages, ships a large community rule set, and runs in CI or on a developer machine.
Comments (2)
Simulated benchmark comments are labeled below and are not endorsements from real users.
- Seb KovacSimulated2mo ago
Rules that look like the code they match. Writing a custom rule takes minutes instead of learning an ast.
- Dave RamanSimulated2d ago
The practical answer: V1.177.0 and they ship roughly weekly. The community rule set keeps growing.
Sign in to leave a comment.
