Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
-
Updated
Jul 24, 2026 - OCaml
#
semgrep
Here are 344 public repositories matching this topic...
Semgrep Community Edition rules, maintained by Semgrep and the community. Free to use under the Semgrep Rules License.
security static-analysis program-analysis security-scanner grep-like semgrep semgrep-rules semgrep-registry
-
Updated
Jul 25, 2026 - HCL
Define and run pattern-based custom linting rules.
-
Updated
Sep 25, 2025 - Go
A collection of my Semgrep rules to facilitate vulnerability research.
-
Updated
Jul 24, 2026 - C
Find zero-days while you sleep. DeepZero is an automated vulnerability research framework that parses, decompiles, and analyzes thousands of Windows kernel drivers for exploitable IOCTLs natively using AI agents.
python ai pipeline reverse-engineering windows-kernel cybersecurity automated-analysis vertex zero-day ai-agents exploit-development vulnerability-research semgrep kernel-drivers vertex-ai llm langchain deep-agents deepzero
-
Updated
Jul 25, 2026 - Python
VULNRΞPO - Free vulnerability report generator and repository, end-to-end encrypted! Templates of issues, CWE,CVE,MITRE ATT&CK,PCI DSS, import Nmap/Nessus/Burp/OpenVAS/Bugcrowd/Trivy, Jira export, TXT/JSON/MARKDOWN/HTML/DOCX, attachments, automatic changelog, stats, vulnerability management, bugbounty, local ai/llm, super fast pentest reporting!
security reporting hacking owasp pci-dss pentesting vulnerabilities bugbounty nessus openvas burpsuite end-to-end-encryption asvs zaproxy security-tool reporting-tool trivy pentest-report semgrep ollama
-
Updated
Jul 20, 2026 - TypeScript
A fast universal code security scanner, written in Rust. Batteries included: supports 14 languages, TUI for triage, secrets, post-quantum audits, diff-aware scans and more 𓃥
rust cli security tree-sitter linter static-analysis pre-commit sarif vulnerability-scanner sast code-security semgrep opengrep
-
Updated
Jul 25, 2026 - Rust
Prevent merging of malicious code in pull requests
obfuscation static-analysis pull-request github-app security-tools cloud-security security-review malware-detection security-rules code-security malicious-code supply-chain-security semgrep semgrep-rules dynamic-execution code-integrity security-scan block-merging cicd-security opengrep
-
Updated
Jan 8, 2026 - Python
-
Updated
Jul 20, 2026 - Java
tool designed for identifying vulnerabilities in open source codebases at scale. It can gather and filter on key repository metrics such as popularity and project size
cli security-audit static-code-analysis owasp vulnerability-scanners security-scanner sast security-research vulnerability-research semgrep
-
Updated
Feb 6, 2025 - Go
Focused malicious code detection ruleset, with a high protection-to-noise ratio
security obfuscation detection malware ruleset appsec devsecops cloud-security malware-detection code-security malicious-code supply-chain-security semgrep semgrep-rules dynamic-execution code-integrity security-scan malicious-detection cicd-security opengrep
-
Updated
Feb 24, 2025 - Python
Generic SAST Library
security regex static-analyzer appsec codeanalysis staticanalysis sast semgrep semanticgrep patternmatch genericsast libsast
-
Updated
May 19, 2026 - Python
Manager of 14 third-party sources comprising approximately 4,000 Semgrep rules 🗂
-
Updated
Dec 24, 2025 - Python
An extension to use Semgrep inside Burp Suite.
-
Updated
May 23, 2025 - Java
GitHub Actions CI/CD - Master Template & Reusable Workflows Library - Docker Builds, AWS, Python, Terraform, Jenkins, Linting, Security Scanning, Make Builds etc.
github python docker jenkins aws library linting terraform ci-cd make cicd ci-cd-pipeline security-scanning github-actions github-actions-ci tfsec checkov semgrep
-
Updated
Feb 3, 2026 - Shell
Autogrep automates Semgrep rule generation and filtering by using LLMs to analyze vulnerability patches, enabling automatic creation of high-quality security rules without manual curation.
static-analysis static-analyzer vulnerability-scanners semgrep semgrep-rules llm genai codellm opengrep
-
Updated
Feb 27, 2025 - Python
This project is deprecated. Use https://github.com/returntocorp/semgrep instead
-
Updated
Apr 9, 2024 - Python
Improve this page
Add a description, image, and links to the semgrep topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the semgrep topic, visit your repo's landing page and select "manage topics."