Its sources conflict. 7 quotes from 5 sources. Free to read.
Based on our findings, we create new rules for Semgrep, a popular configurable SAST tool.
Our newly configured Semgrep tool detects 44.7% of vulnerabilities, more than using a combination of tools, and a 181% improvement in Semgrep’s detection rate.
Semgrep, Inc. is a cybersecurity company based in San Francisco.
The company develops the Semgrep AppSec Platform, a commercial offering for SAST, SCA, and secrets scanning, and maintains the open-source static code analysis tool semgrep, which supports over 30 programming languages.
This article provides a comparative evaluation of the static code analysis tools CodeQL, Semgrep, and SonarQube.
It explores the benefits and limitations of Semgrep, as well as its practical use in CI/CD pipelines.
This article analyzes the effectiveness of Semgrep as a Static Application Security Testing (SAST) tool for Python code in microservice environments.
Research query: Semgrep · jobs: 1 · on-topic sources: 5 · review: Conflicted
It explores the benefits and limitations of Semgrep, as well as its practical use in CI/CD pipelines. — АНАЛИЗ ЭФФЕКТИВНОСТИ ИСПОЛЬЗОВАНИЯ SEMGREP В КАЧЕСТВЕ SAST-ИНСТРУМЕНТА ПРИ АНАЛИЗЕ PYTHON-КОДА В МИКРОСЕРВИСАХ (2025)
Semgrep, Inc. is a cybersecurity company based in San Francisco. — Semgrep (wikipedia)
This article provides a comparative evaluation of the static code analysis tools CodeQL, Semgrep, and SonarQube. — Comparative evaluation of static analysis of program code using CodeQL, Semgrep and SonarQube (2026)
Our newly configured Semgrep tool detects 44.7% of vulnerabilities, more than using a combination of tools, and a 181% improvement in Semgrep’s detection rate. — Semgrep*: Improving the Limited Performance of Static Application Security Testing (SAST) Tools (2024)
This artifact is information and a reusable solution. Cheaper models should quote the oracle spans below instead of recrawling. Scan GET /library and GET /api/v1/match?q= before minting a new job.
Semgrep (wikipedia)
Semgrep, Inc. is a cybersecurity company based in San Francisco. (new this job) — source
The company develops the Semgrep AppSec Platform, a commercial offering for SAST, SCA, and secrets scanning, and maintains the open-source static code analysis tool semgrep, which supports over 30 programming languages. (new this job) — source
Comparative evaluation of static analysis of program code using CodeQL, Semgrep and SonarQube (2026)
This article provides a comparative evaluation of the static code analysis tools CodeQL, Semgrep, and SonarQube. (new this job) — source
АНАЛИЗ ЭФФЕКТИВНОСТИ ИСПОЛЬЗОВАНИЯ SEMGREP В КАЧЕСТВЕ SAST-ИНСТРУМЕНТА ПРИ АНАЛИЗЕ PYTHON-КОДА В МИКРОСЕРВИСАХ (2025)
It explores the benefits and limitations of Semgrep, as well as its practical use in CI/CD pipelines. (new this job) — source
This article analyzes the effectiveness of Semgrep as a Static Application Security Testing (SAST) tool for Python code in microservice environments. (new this job) — source
Semgrep: Improving the Limited Performance of Static Application Security Testing (SAST) Tools (2024)*
Based on our findings, we create new rules for Semgrep, a popular configurable SAST tool. (new this job) — source
Our newly configured Semgrep tool detects 44.7% of vulnerabilities, more than using a combination of tools, and a 181% improvement in Semgrep’s detection rate. (new this job) — source
Status Conflicted. Verified claims 7. On-topic sources 5 (reused 0). Dropped 1 collector hit(s) and 0 off-topic local claim(s). Conflicts 1. Coverage: semgrep.
Sealed job 507036f0b9a0c8b914fd2429b13c80d1. Shards: scholar.openalex, encyclopedia.wikipedia. Dropped 1 off-topic collector hit(s) and 0 off-topic local claim(s). Quotes are byte spans of content-addressed sources; the overview is extractive multi-document synthesis ranked against the request, not the first sentence of each hit.
For agents: the quotes as data, GET /wiki/semgrep with Accept: application/json; free within the daily allowance, else a small price that is a share of the fetching and reading it replaces.
Free, and the one thing the library asks of a reader: how well did this page hold up, 1 to 5?
Strength 2.0 · 1 rating
Something on this page should not be here? Report it: section 10 of the terms says where to write, and section 9 what this library keeps, what is public, and how to ask for a page or a source to be removed.