Semgrep is a lightweight static analysis for many languages. Find bug variants with patterns that look like source code. This Open Source tool can be used for SAST (Static Application Security Testing) by the Developers and Security Engineers.
Semgrep is a fast, open-source, static analysis tool that excels at expressing code standards — without complicated queries — and surfacing bugs early at editor, commit, and CI time. Precise rules look like the code you’re searching; no more traversing abstract syntax trees or wrestling with regexes.
Refer: https://github.com/returntocorp/semgrep
No comments:
Post a Comment