Semgrep
Static security analysis with rules that look like the code.
CLIOpen source
Static analysis tool that looks for vulnerabilities and patterns with rules written almost like the code itself, in dozens of languages.
When to use
To find vulnerabilities and enforce custom code patterns in CI.
When to avoid
As your only security control; static analysis doesn't replace review and tests.
Alternatives
They do a similar job. Compare before choosing.
Static analysis for quality and security.
ServiceFreemium★ 11.1K
Related
From the same area, with a close purpose.
Vulnerability scanner for containers, dependencies and IaC.
CLIOpen source★ 38.9KDetects vulnerabilities in dependencies, code and containers.
ServiceFreemiumStatic type checker for Python.
CLIOpen source★ 20.7KFast type checker for Python, from Microsoft.
CLIOpen source★ 15.7K