Semgrep Community Edition rules, maintained by Semgrep and the community. Free to use under the Semgrep Rules License.
A collection of my Semgrep rules to facilitate vulnerability research.
Prevent merging of malicious code in pull requests
Focused malicious code detection ruleset, with a high protection-to-noise ratio
Manager of 14 third-party sources comprising approximately 4,000 Semgrep rules 🗂
Autogrep automates Semgrep rule generation and filtering by using LLMs to analyze vulnerability patches, enabling automatic creation of high-quality security rules without manual curation.
A collection of permissively licensed Semgrep rules.
Curated Collection of Popular Community Rules for Semgrep
Ricerca che mostra come scrivere regole per SemGrep per cercare SQL Injection nei plugin di Wordpress che usano action AJAX
semgrep rules for flakiness, missed error handling, Lua antipatterns and pitfalls.
Custom semgrep rules registry
Semgrep rules to identify GWT attack surface
Repository for my Semgrep hot spot rules
Semgrep rules I've personally written to help me find security vulnerabilities in WordPress plugins.
Converted security rules fromcodeql to semgrep format.
Semgrep is a static analysis tool designed for code scanning.
Atlassian-maintained Semgrep rules. Free to use under the LGPL 2.1 License.
To associate your repository with the semgrep-rules topic, visit your repo's landing page and select "manage topics."