Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

Define and run pattern-based custom linting rules.

Semgrep rules registry

Semgrep rules for smart contracts based on DeFi exploits

A collection of my Semgrep rules to facilitate vulnerability research.

VULNRΞPO - Free vulnerability report generator and repository, end-to-end encrypted! Templates of issues, CWE, CVE, MITRE ATT&CK, PCI DSS, issues import Nmap/Nessus/Burp/OpenVAS/Bugcrowd/Trivy, Jira export, TXT/JSON/MARKDOWN/HTML/PDF report, attachments, automatic changelog, statistics, vulnerability management, bug bounty, pentest reporting, etc..

A collection of Semgrep rules derived from the OWASP MASTG specifically for Android applications.

Generic SAST Library

An extension to use Semgrep inside Burp Suite.

This project is deprecated. Use https://github.com/returntocorp/semgrep instead

Manager of third-party sources of Semgrep rules 🗂

🌐 Visualize and explore IaC ✒️ Create and share notes in VS Code 🤝 Sync notes and findings in real-time with friends

Semgrep extension for Visual Studio Code

Documentation of Semgrep: a fast, open-source, static analysis tool.

Semgrep rules specific to Frappe Framework

GitHub Actions master template and GitHub Actions Reusable Workflows

《深入理解Semgrep》Finding vulnerabilities with Semgrep.

Automatically scan new pypi packages for potentially malicious code

Semgrep rules for Cairo 1.0