Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
-
Updated
Sep 4, 2026 - OCaml
#
semgrep
Here are 439 public repositories matching this topic...
Semgrep Community Edition rules, maintained by Semgrep and the community. Free to use under the Semgrep Rules License.
security static-analysis program-analysis security-scanner grep-like semgrep semgrep-rules semgrep-registry
-
Updated
Jul 31, 2026 - HCL
Define and run pattern-based custom linting rules.
-
Updated
Sep 25, 2025 - Go
A collection of my Semgrep rules to facilitate vulnerability research.
-
Updated
Aug 14, 2026 - C
Find zero-days while you sleep. DeepZero is an automated vulnerability research framework that parses, decompiles, and analyzes thousands of Windows kernel drivers for exploitable IOCTLs natively using AI agents.
python ai pipeline reverse-engineering windows-kernel cybersecurity automated-analysis vertex zero-day ai-agents exploit-development vulnerability-research semgrep kernel-drivers vertex-ai llm langchain deep-agents deepzero
-
Updated
Aug 2, 2026 - Python
VULNRΞPO - Free vulnerability report generator and repository, end-to-end encrypted! Templates of issues, CWE,CVE,MITRE ATT&CK,PCI DSS, import Nmap/Nessus/Burp/OpenVAS/Bugcrowd/Trivy, Jira export, TXT/JSON/MARKDOWN/HTML/DOCX, attachments, automatic changelog, stats, vulnerability management, bugbounty, local ai/llm, super fast pentest reporting!
security reporting hacking owasp pci-dss pentesting vulnerabilities bugbounty nessus openvas burpsuite end-to-end-encryption asvs zaproxy security-tool reporting-tool trivy pentest-report semgrep ollama
-
Updated
Sep 7, 2026 - TypeScript
A fast universal code security scanner, written in Rust. Batteries included: supports 14 languages, TUI for triage, secrets, post-quantum audits, diff-aware scans and more 𓃥
rust cli security tree-sitter linter static-analysis pre-commit sarif vulnerability-scanner sast code-security semgrep opengrep
-
Updated
Aug 19, 2026 - Rust
Prevent merging of malicious code in pull requests
obfuscation static-analysis pull-request github-app security-tools cloud-security security-review malware-detection security-rules code-security malicious-code supply-chain-security semgrep semgrep-rules dynamic-execution code-integrity security-scan block-merging cicd-security opengrep
-
Updated
Jan 8, 2026 - Python
-
Updated
Aug 31, 2026 - Java
tool designed for identifying vulnerabilities in open source codebases at scale. It can gather and filter on key repository metrics such as popularity and project size
cli security-audit static-code-analysis owasp vulnerability-scanners security-scanner sast security-research vulnerability-research semgrep
-
Updated
Feb 6, 2025 - Go
Focused malicious code detection ruleset, with a high protection-to-noise ratio
security obfuscation detection malware ruleset appsec devsecops cloud-security malware-detection code-security malicious-code supply-chain-security semgrep semgrep-rules dynamic-execution code-integrity security-scan malicious-detection cicd-security opengrep
-
Updated
Feb 24, 2025 - Python
Generic SAST Library
security regex static-analyzer appsec codeanalysis staticanalysis sast semgrep semanticgrep patternmatch genericsast libsast
-
Updated
Aug 10, 2026 - Python
Manager of 14 third-party sources comprising approximately 4,000 Semgrep rules 🗂
-
Updated
Dec 24, 2025 - Python
An extension to use Semgrep inside Burp Suite.
-
Updated
May 23, 2025 - Java
Autogrep automates Semgrep rule generation and filtering by using LLMs to analyze vulnerability patches, enabling automatic creation of high-quality security rules without manual curation.
static-analysis static-analyzer vulnerability-scanners semgrep semgrep-rules llm genai codellm opengrep
-
Updated
Feb 27, 2025 - Python
GitHub Actions CI/CD - Master Template & Reusable Workflows Library - Docker Builds, AWS, Python, Terraform, Jenkins, Linting, Security Scanning, Make Builds etc.
github python docker jenkins aws library linting terraform ci-cd make cicd ci-cd-pipeline security-scanning github-actions github-actions-ci tfsec checkov semgrep
-
Updated
Feb 3, 2026 - Shell
AI-powered SAST scanner that finds auth bypass, IDOR, and logic bugs Semgrep/CodeQL miss. Free GitHub Action. Supports Python, JS/TS, Go, PHP, Ruby.
ruby python php security ai static-analysis owasp code-review appsec sarif security-tools devsecops claude vulnerability-scanner sast github-actions code-security codeql semgrep llm
-
Updated
Jun 10, 2026 - Python
Add this topic to your repo
To associate your repository with the semgrep topic, visit your repo's landing page and select "manage topics."