Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
-
Updated
Apr 17, 2026 - OCaml
#
semgrep
Here are 190 public repositories matching this topic...
Semgrep Community Edition rules, maintained by Semgrep and the community. Free to use under the Semgrep Rules License.
security static-analysis program-analysis security-scanner grep-like semgrep semgrep-rules semgrep-registry
-
Updated
Apr 18, 2026 - HCL
Define and run pattern-based custom linting rules.
-
Updated
Sep 25, 2025 - Go
A collection of my Semgrep rules to facilitate vulnerability research.
-
Updated
Apr 12, 2026 - C
VULNRΞPO - Free vulnerability report generator and repository, end-to-end encrypted! Templates of issues, CWE,CVE,MITRE ATT&CK,PCI DSS, import Nmap/Nessus/Burp/OpenVAS/Bugcrowd/Trivy, Jira export, TXT/JSON/MARKDOWN/HTML/DOCX, attachments, automatic changelog, stats, vulnerability management, bugbounty, local ai/llm, super fast pentest reporting!
security reporting hacking owasp pci-dss pentesting vulnerabilities bugbounty nessus openvas burpsuite end-to-end-encryption asvs zaproxy security-tool reporting-tool trivy pentest-report semgrep ollama
-
Updated
Apr 17, 2026 - TypeScript
Prevent merging of malicious code in pull requests
obfuscation static-analysis pull-request github-app security-tools cloud-security security-review malware-detection security-rules code-security malicious-code supply-chain-security semgrep semgrep-rules dynamic-execution code-integrity security-scan block-merging cicd-security opengrep
-
Updated
Jan 8, 2026 - Python
tool designed for identifying vulnerabilities in open source codebases at scale. It can gather and filter on key repository metrics such as popularity and project size
cli security-audit static-code-analysis owasp vulnerability-scanners security-scanner sast security-research vulnerability-research semgrep
-
Updated
Feb 6, 2025 - Go
-
Updated
Dec 18, 2025 - Java
A security scanner as fast as a linter, written in Rust.
rust cli security tree-sitter linter static-analysis pre-commit sarif vulnerability-scanner sast code-security semgrep opengrep
-
Updated
Apr 17, 2026 - Rust
Focused malicious code detection ruleset, with a high protection-to-noise ratio
security obfuscation detection malware ruleset appsec devsecops cloud-security malware-detection code-security malicious-code supply-chain-security semgrep semgrep-rules dynamic-execution code-integrity security-scan malicious-detection cicd-security opengrep
-
Updated
Feb 24, 2025 - Python
Generic SAST Library
security regex static-analyzer appsec codeanalysis staticanalysis sast semgrep semanticgrep patternmatch genericsast libsast
-
Updated
Jun 17, 2025 - Python
Manager of 14 third-party sources comprising approximately 4,000 Semgrep rules 🗂
-
Updated
Dec 24, 2025 - Python
Find zero-days while you sleep. DeepZero is an automated vulnerability research framework that parses, decompiles, and analyzes thousands of Windows kernel drivers for exploitable IOCTLs natively using AI agents.
python ai pipeline reverse-engineering windows-kernel cybersecurity automated-analysis vertex zero-day ai-agents exploit-development vulnerability-research semgrep kernel-drivers vertex-ai llm langchain deep-agents deepzero
-
Updated
Apr 16, 2026 - Python
An extension to use Semgrep inside Burp Suite.
-
Updated
May 23, 2025 - Java
GitHub Actions CI/CD - Master Template & Reusable Workflows Library - Docker Builds, AWS, Python, Terraform, Jenkins, Linting, Security Scanning, Make Builds etc.
github python docker jenkins aws library linting terraform ci-cd make cicd ci-cd-pipeline security-scanning github-actions github-actions-ci tfsec checkov semgrep
-
Updated
Feb 3, 2026 - Shell
Autogrep automates Semgrep rule generation and filtering by using LLMs to analyze vulnerability patches, enabling automatic creation of high-quality security rules without manual curation.
static-analysis static-analyzer vulnerability-scanners semgrep semgrep-rules llm genai codellm opengrep
-
Updated
Feb 27, 2025 - Python
Semgrep extension for Visual Studio Code
-
Updated
Apr 10, 2026 - TypeScript
Improve this page
Add a description, image, and links to the semgrep topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the semgrep topic, visit your repo's landing page and select "manage topics."