Software Development

Semgrep

Semgrep is an open-source static analysis tool that finds bugs, security vulnerabilities and anti-patterns by matching code patterns. Use it to scan a repository, write custom YAML rules, auto-fix findings, or add a Semgrep scan with SARIF output to GitHub Actions or other CI.

Publisher / source
TerminalSkills Library
Upstream record
TerminalSkills/skills
Version
Version 4
Published
Publication review
Approved for publication
Content fingerprint
2968d5096daeb84cbb982edba640c88c13b9da566960cdb4254d860382a22100