Skip to content

@semgrep Semgrep

Change the repository type filter

All

    Repositories list

    131 repositories

    • semgrep

      Public
      Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
      javascriptrubypythoncjavagotypescriptstatic-code-analysisstatic-analysissast
      OCaml
      •
      GNU Lesser General Public License v2.1
      •838•14k•797•4•Updated Dec 9, 2025Dec 9, 2025

    • semgrep-docs

      Public
      Documentation of Semgrep: a fast, open-source, static analysis tool.
      semgrep
      MDX
      •
      GNU Lesser General Public License v2.1
      •107•47•8•15•Updated Dec 9, 2025Dec 9, 2025

    • semgrep-interfaces

      Public
      Store the ATD/openapi/protobuf/... interfaces between semgrep components
      Python
      •
      GNU Lesser General Public License v2.1
      •12•18•1•8•Updated Dec 9, 2025Dec 9, 2025

    • ocaml

      Public
      The core OCaml system: compilers, runtime system, base libraries
      OCaml
      •
      Other
      •1.2k•0•0•2•Updated Dec 9, 2025Dec 9, 2025

    • semgrep-rules

      Public
      Semgrep Community Edition rules, maintained by Semgrep and the community. Free to use under the Semgrep Rules License.
      securitystatic-analysisprogram-analysissecurity-scannergrep-likesemgrepsemgrep-rulessemgrep-registry
      HCL
      •
      Other
      •486•1k•53•47•Updated Dec 9, 2025Dec 9, 2025

    • semgrep-network-broker

      Public
      Facilitates network access between Semgrep and on-prem resources
      Go
      •
      MIT License
      •4•8•0•11•Updated Dec 8, 2025Dec 8, 2025

    • e2e

      Public
      [MISSING DESCRIPTION]
      Shell
      •0•2•0•1.3k•Updated Dec 8, 2025Dec 8, 2025

    • setup-ocaml

      Public
      GitHub Action for the OCaml programming language (Semgrep Fork)
      TypeScript
      •
      MIT License
      •46•0•0•1•Updated Dec 8, 2025Dec 8, 2025

    • pre-commit

      Public
      Pre-commit hooks to run Semgrep
      Shell
      •
      GNU Lesser General Public License v2.1
      •4•4•3•5•Updated Dec 6, 2025Dec 6, 2025

    • semgrep-vscode

      Public
      Semgrep extension for Visual Studio Code
      vscodevisual-studio-codevscode-extensionsemgrep
      TypeScript
      •
      GNU Lesser General Public License v2.1
      •27•73•13•21•Updated Dec 6, 2025Dec 6, 2025

    • semgrep-benchmark-lichess-lila

      Public
      ♞ lichess.org: the forever free, adless and open source chess server ♞
      Scala
      •
      GNU Affero General Public License v3.0
      •0•0•0•0•Updated Dec 5, 2025Dec 5, 2025

    • agents.md

      Public
      AGENTS.md — a simple, open format for guiding coding agents
      TypeScript
      •
      MIT License
      •705•0•0•2•Updated Dec 3, 2025Dec 3, 2025

    • ocaml-tree-sitter-core

      Public
      OCaml code generator and runtime library for handling typed tree-sitter CSTs
      OCaml
      •
      GNU Lesser General Public License v2.1
      •6•42•7•4•Updated Dec 3, 2025Dec 3, 2025

    • validation-benchmarks

      Public
      XBOW Validation Benchmarks -- Forked by ZeroPath
      PHP
      •
      Apache License 2.0
      •115•0•0•12•Updated Dec 3, 2025Dec 3, 2025

    • pyro-caml

      Public
      A statistical continuous profiler for OCaml compatible with Pyroscope
      OCaml
      •0•7•1•4•Updated Nov 22, 2025Nov 22, 2025

    • ocaml-opentelemetry

      Public
      Instrumentation for https://opentelemetry.io
      OCaml
      •13•0•0•0•Updated Nov 21, 2025Nov 21, 2025

    • kics

      Public
      Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.
      Open Policy Agent
      •
      Apache License 2.0
      •353•0•0•2•Updated Nov 20, 2025Nov 20, 2025

    • testo

      Public
      Test framework for OCaml
      OCaml
      •
      ISC License
      •3•30•21•1•Updated Nov 16, 2025Nov 16, 2025

    • convert-nuget

      Public
      NuGet/dotnet packages.config to packages.lock.json converter
      JavaScript
      •
      MIT License
      •0•2•0•0•Updated Nov 5, 2025Nov 5, 2025

    • convert-libman

      Public
      Conversion script for libman.json to package.json and package-lock.json
      JavaScript
      •
      MIT License
      •0•1•0•0•Updated Nov 4, 2025Nov 4, 2025

    • mcp

      Public archive
      A MCP server for using Semgrep to scan code for security vulnerabilities.
      mcpsemgrep
      Python
      •
      MIT License
      •54•618•12•17•Updated Oct 28, 2025Oct 28, 2025

    • ocaml-tree-sitter-semgrep

      Public
      Generate parsers from tree-sitter grammars extended to support Semgrep patterns
      Move
      •
      GNU General Public License v3.0
      •19•11•10•7•Updated Oct 15, 2025Oct 15, 2025

    • semgrep-c-sharp

      Public
      generated C# parser for semgrep
      C
      •5•4•0•0•Updated Oct 3, 2025Oct 3, 2025

    • semgrep-gosu

      Public template
      generated gosu parser for semgrep
      C
      •3•0•0•0•Updated Sep 24, 2025Sep 24, 2025

    • semgrep-tsx

      Public
      generated TSX parser for semgrep
      C
      •2•3•0•0•Updated Sep 22, 2025Sep 22, 2025

    • semgrep-typescript

      Public
      generated TypeScript parser for semgrep
      C
      •3•2•0•0•Updated Sep 22, 2025Sep 22, 2025

    • semgrep-solidity

      Public
      generated Solidity parser for semgrep
      C
      •1•3•0•0•Updated Sep 17, 2025Sep 17, 2025

    • mcp-tool-shadowing-demo

      Public
      a demonstration of tool shadowing behavior in the Model Context Protocol
      Python
      •
      MIT License
      •0•1•0•0•Updated Sep 9, 2025Sep 9, 2025

    • homebrew-infra

      Public
      Infrastructure Homebrew Formulae
      Ruby
      •0•0•0•1•Updated Sep 3, 2025Sep 3, 2025

    • semgrep-java

      Public
      generated java parser for semgrep
      C
      •1•1•0•0•Updated Jun 24, 2025Jun 24, 2025