Semgrep

Search code for bugs with patterns

semgrep
 
Open sourceCommand-line tool

Third-party software from public repositories. bestappfor.me does not host it, does not verify it and is not responsible for its use. Download only from the official source and check the license. Terms and disclaimer

Stars
17.1K
GitHub
Health
Solid
10 of 10 checks passed
License
LGPL-2.1-only
Open source
Version
1.180.0
6 days ago
Category
Developer tools
Command-line tool
Language
C

About

Semgrep scans source code for bugs, risky patterns and rule violations. You write rules that look like the code you already write, rather than regular expressions or syntax trees, and it matches code by meaning, not only by exact text.

It supports more than 30 languages and runs in an editor, as a pre-commit check or in CI/CD. Analysis happens locally, and by default your code is not uploaded. The Community Edition looks at one function or file at a time, so for security work the project recommends its separate AppSec Platform.

Highlights

  • Supports 30+ programming languages
  • Rules written as code-like patterns
  • Runs locally, in IDE, pre-commit or CI/CD

Who it's for

Good for developers who want to catch bugs and enforce coding rules in every commit or CI run

This description was written by our editors with automated assistance, not by the developer, and has not been reviewed yet.

Why it is here

  • Code changed 6 days ago
  • New release 6 days ago

Official channels

Official channels only. We never host or repackage downloads.

Homebrew
macOS, Linux
1.180.0
brew install semgrep

You might also like

See all