semgrep

There are 5 repositories under semgrep topic.

• semgrep

  semgrep / semgrep

  Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

  cgojavajavascriptpythonr2crubysastsemgrepstatic-analysisstatic-code-analysistypescript
  Language:OCaml 9801
• go-ruleguard

  quasilyte / go-ruleguard

  Define and run pattern-based custom linting rules.

  analysiscodeqldynamic-rulesgogo-analysisgogrepgolanglinterruleguardsemgrepstatic-analysis
  Language:Go 768

• semgrep / semgrep-rules

  Semgrep rules registry

  static-analysisgrep-likeprogram-analysissecuritysecurity-scannersemgrepsemgrep-rulessemgrep-registry
  Language:Solidity 713

• Decurity / semgrep-smart-contracts

  Semgrep rules for smart contracts based on DeFi exploits

  defisecuritysemgrepsolidityethereum
  Language:Solidity 612

• 0xdea / semgrep-rules

  A collection of my Semgrep rules to facilitate vulnerability research.

  code-reviewsemgrepsemgrep-rulesstatic-analysisvulnerability-research
  Language:C 509
• vulnrepo

  kac89 / vulnrepo

  VULNRΞPO - Free vulnerability report generator and repository, end-to-end encrypted! Templates of issues, CWE, CVE, MITRE ATT&CK, PCI DSS, issues import Nmap/Nessus/Burp/OpenVAS/Bugcrowd/Trivy, Jira export, TXT/JSON/MARKDOWN/HTML/PDF report, attachments, automatic changelog, statistics, vulnerability management, bug bounty, pentest reporting, etc..

  bugbountyburpsuitecomposercveend-to-end-encryptionmitre-attacknessusnmapnpm-auditopenvaspci-dsspentestingsecuritysecurity-teamsecurity-toolsemgreptrivyvulnerability-managementvulnerability-reportvulnerability-research
  Language:TypeScript 384

• mindedsecurity / semgrep-rules-android-security

  A collection of Semgrep rules derived from the OWASP MASTG specifically for Android applications.

  maptmastgowaspsemgrep
  Language:Java 203
• semgrep-rules

  elttam / semgrep-rules

  semgrep-rulessemgrep
  Language:Java 161

• ajinabraham / libsast

  Generic SAST Library

  appsecsastsemanticgrepsemgreppatternmatchregexcodeanalysisstaticanalysissecuritystatic-analyzergenericsastlibsast
  Language:Python 119

• gand3lf / semgrepper

  An extension to use Semgrep inside Burp Suite.

  burpsuite-extensionsecurity-scannersemgrep
  Language:Java 84

• semgrep / semgrep-action

  This project is deprecated. Use https://github.com/returntocorp/semgrep instead

  semgrepgithub-actionsstatic-analysissastcici-cd
  Language:Python 72

• iosifache / semgrep-rules-manager

  Manager of third-party sources of Semgrep rules 🗂

  semgrepsemgrep-rulessemgrep-rules-manager
  Language:Python 67

• doyensec / PoiEx

  🌐 Visualize and explore IaC ✒️ Create and share notes in VS Code 🤝 Sync notes and findings in real-time with friends

  collaborative-editingiacsecuritysecurity-toolssemgrepvscodevscode-extension
  Language:TypeScript 65

• semgrep / semgrep-vscode

  Semgrep extension for Visual Studio Code

  semgrepvisual-studio-codevscode-extensionvscode
  Language:TypeScript 52

• frappe / semgrep-rules

  Semgrep rules specific to Frappe Framework

  lintsemgrepfrappe-frameworkerpnext
  Language:Python 37

• semgrep / semgrep-docs

  Documentation of Semgrep: a fast, open-source, static analysis tool.

  semgrep
  Language:MDX 37

• HariSekhon / GitHub-Actions

  GitHub Actions master template and GitHub Actions Reusable Workflows

  githubgithub-actionsci-cdci-cd-pipelinegithub-actions-cicicdjenkinsjenkinsfilesemgreptfsectfsec-checkscheckovvalidationvalidation-libraryvalidationslibraryhacktoberfest
  Language:Makefile 32

• ASTTeam / Semgrep

  《深入理解Semgrep》Finding vulnerabilities with Semgrep.

  0e0wcodeqlsemgrep
  30

• h4sh5 / pypi-auto-scanner

  Automatically scan new pypi packages for potentially malicious code

  malwarepippypipythonpython3sastscanningsecuritysemgrep
  Language:Python 25

• icholy / semgrepx

  xargs for semgrep

  aigolangllmsemgrep
  Language:Go 18

• avnu-labs / semgrep-cairo-rules

  Semgrep rules for Cairo 1.0

  cairocairo-langsemgrep
  Language:Cairo 17

• vmnguyen / semgrep-rules

  My custom semgrep rules

  static-analysissemgrepcode-reviewjavabug-bounty
  Language:Python 16
• GreedyForSQLi

  mrnfrancesco / GreedyForSQLi

  Ricerca che mostra come scrivere regole per SemGrep per cercare SQL Injection nei plugin di Wordpress che usano action AJAX

  code-reviewresearchsemgrepsemgrep-rulessql-injectionwordpresswordpress-plugin
  Language:PHP 14

• ligurio / semgrep-rules

  semgrep rules for flakiness, missed error handling, Lua antipatterns and pitfalls.

  static-analysiscode-qualityflaky-testsnon-determinismsemgrepsemgrep-ruleserror-handlinggolangluapythonflakiness
  Language:Lua 12

• FHPythonUtils / SimpleSecurity

  Combine multiple popular python security tools and generate reports or output into different formats

  pythonpython-securitybanditsimplesecuritydlintdodgysafetysecurity-reportsecurity-toolslintingstatic-analysissemgrepsarif
  Language:Python 10

• j3ssie / curated-semgrep-rules

  Curated Collection of Popular Community Rules for Semgrep

  sastsemgrepsemgrep-rules
  Language:Solidity 10

• kondukto-io / semgrep-rules

  Custom semgrep rules registry

  static-analysissecurity-scannersemgrep-rulessemgrepkondukto
  Language:Java 10

• silentsignal / SemGWT

  Semgrep rules to identify GWT attack surface

  semgrepgwtgwt-rpcsemgrep-rules
  Language:Python 10

• avnu-labs / tree-sitter-cairo

  Cairo 1.0 - Tree-Sitter

  cairosemgrep
  Language:JavaScript 6

• parsiya / personal-semgrep-server

  Personal Semgrep Server for learning Rust.

  rustsemgrep
  Language:Rust 6

• dottif / prototype-pollution-static-analysis

  Detecting prototype pollution vulnerabilities in JavaScript using static analysis

  codeqljavascriptprototype-pollutionsecuritysemgrepstatic-analysisvulnerability
  Language:JavaScript 5

• navhits / semgrep-precommit

  Pre-commit hook for Semgrep with diff awareness 😉

  semgreppre-commitprecommit
  Language:Python 5

• semgrep-old / rules-nodejsscan

  nodejsscannjsscansemgrep-rulessemgrepjavascript
  Language:JavaScript 4
• codearsenalcommunity.github.io

  CodeArsenalCommunity / codearsenalcommunity.github.io

  auditingcodesecuritycybersecuritysastsemgrep
  Language:JavaScript 3

• dipa96 / semgrep-rules

  Collection of rules for Static Application Security Testing (SAST) with SemGrep

  application-securitybugbountycodereviewsastsemgrep
  Language:HTML 3

• majidmc2 / SecSnake

  Client-Side-Attack finder Firefox extension

  request-analyzersemgrepcode-analysisclient-side-attacks
  Language:Python 3