Skip to content

@semgrep Semgrep

Change the repository type filter

All

    Repositories list

    133 repositories

    • semgrep

      Public
      Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
      javascriptrubypythoncjavagotypescriptstatic-code-analysisstatic-analysissast
      OCaml
      •
      GNU Lesser General Public License v2.1
      •844•14k•803•7•Updated Dec 26, 2025Dec 26, 2025

    • e2e

      Public
      [MISSING DESCRIPTION]
      Shell
      •0•2•0•1.4k•Updated Dec 25, 2025Dec 25, 2025

    • semgrep-rules

      Public
      Semgrep Community Edition rules, maintained by Semgrep and the community. Free to use under the Semgrep Rules License.
      securitystatic-analysisprogram-analysissecurity-scannergrep-likesemgrepsemgrep-rulessemgrep-registry
      HCL
      •
      Other
      •489•1k•55•50•Updated Dec 25, 2025Dec 25, 2025

    • setup-ocaml

      Public
      GitHub Action for the OCaml programming language (Semgrep Fork)
      TypeScript
      •
      MIT License
      •46•0•0•4•Updated Dec 24, 2025Dec 24, 2025

    • semgrep-docs

      Public
      Documentation of Semgrep: a fast, open-source, static analysis tool.
      semgrep
      MDX
      •
      GNU Lesser General Public License v2.1
      •108•47•8•10•Updated Dec 23, 2025Dec 23, 2025

    • semgrep-interfaces

      Public
      Store the ATD/openapi/protobuf/... interfaces between semgrep components
      Python
      •
      GNU Lesser General Public License v2.1
      •12•18•1•5•Updated Dec 20, 2025Dec 20, 2025

    • mcp-marketplace

      Public
      Home for the Semgrep Claude Code Plugin.
      Shell
      •0•0•0•0•Updated Dec 19, 2025Dec 19, 2025

    • semgrep-network-broker

      Public
      Facilitates network access between Semgrep and on-prem resources
      Go
      •
      MIT License
      •4•8•0•10•Updated Dec 19, 2025Dec 19, 2025

    • ocaml

      Public
      The core OCaml system: compilers, runtime system, base libraries
      OCaml
      •
      Other
      •1.2k•0•0•2•Updated Dec 17, 2025Dec 17, 2025

    • pre-commit

      Public
      Pre-commit hooks to run Semgrep
      Shell
      •
      GNU Lesser General Public License v2.1
      •4•4•3•5•Updated Dec 17, 2025Dec 17, 2025

    • semgrep-vscode

      Public
      Semgrep extension for Visual Studio Code
      vscodevisual-studio-codevscode-extensionsemgrep
      TypeScript
      •
      GNU Lesser General Public License v2.1
      •27•73•13•24•Updated Dec 17, 2025Dec 17, 2025

    • validation-benchmarks

      Public
      XBOW Validation Benchmarks -- Forked by ZeroPath
      PHP
      •
      Apache License 2.0
      •127•0•0•13•Updated Dec 12, 2025Dec 12, 2025

    • agents.md

      Public
      AGENTS.md — a simple, open format for guiding coding agents
      TypeScript
      •
      MIT License
      •951•0•0•2•Updated Dec 12, 2025Dec 12, 2025

    • obackward

      Public
      C++
      •0•0•0•0•Updated Dec 10, 2025Dec 10, 2025

    • semgrep-benchmark-lichess-lila

      Public
      ♞ lichess.org: the forever free, adless and open source chess server ♞
      Scala
      •
      GNU Affero General Public License v3.0
      •0•0•0•0•Updated Dec 5, 2025Dec 5, 2025

    • ocaml-tree-sitter-core

      Public
      OCaml code generator and runtime library for handling typed tree-sitter CSTs
      OCaml
      •
      GNU Lesser General Public License v2.1
      •8•42•7•3•Updated Dec 3, 2025Dec 3, 2025

    • pyro-caml

      Public
      A statistical continuous profiler for OCaml compatible with Pyroscope
      OCaml
      •0•7•1•4•Updated Nov 22, 2025Nov 22, 2025

    • ocaml-opentelemetry

      Public
      Instrumentation for https://opentelemetry.io
      OCaml
      •13•0•0•0•Updated Nov 21, 2025Nov 21, 2025

    • kics

      Public
      Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.
      Open Policy Agent
      •
      Apache License 2.0
      •354•0•0•2•Updated Nov 20, 2025Nov 20, 2025

    • testo

      Public
      Test framework for OCaml
      OCaml
      •
      ISC License
      •3•32•21•1•Updated Nov 16, 2025Nov 16, 2025

    • convert-nuget

      Public
      NuGet/dotnet packages.config to packages.lock.json converter
      JavaScript
      •
      MIT License
      •0•2•0•0•Updated Nov 5, 2025Nov 5, 2025

    • convert-libman

      Public
      Conversion script for libman.json to package.json and package-lock.json
      JavaScript
      •
      MIT License
      •0•1•0•0•Updated Nov 4, 2025Nov 4, 2025

    • mcp

      Public archive
      A MCP server for using Semgrep to scan code for security vulnerabilities.
      mcpsemgrep
      Python
      •
      MIT License
      •54•626•12•17•Updated Oct 28, 2025Oct 28, 2025

    • ocaml-tree-sitter-semgrep

      Public
      Generate parsers from tree-sitter grammars extended to support Semgrep patterns
      Move
      •
      GNU General Public License v3.0
      •20•11•10•7•Updated Oct 15, 2025Oct 15, 2025

    • semgrep-c-sharp

      Public
      generated C# parser for semgrep
      C
      •5•4•0•0•Updated Oct 3, 2025Oct 3, 2025

    • semgrep-gosu

      Public template
      generated gosu parser for semgrep
      C
      •3•0•0•0•Updated Sep 24, 2025Sep 24, 2025

    • semgrep-tsx

      Public
      generated TSX parser for semgrep
      C
      •2•3•0•0•Updated Sep 22, 2025Sep 22, 2025

    • semgrep-typescript

      Public
      generated TypeScript parser for semgrep
      C
      •3•2•0•0•Updated Sep 22, 2025Sep 22, 2025

    • semgrep-solidity

      Public
      generated Solidity parser for semgrep
      C
      •1•3•0•0•Updated Sep 17, 2025Sep 17, 2025

    • mcp-tool-shadowing-demo

      Public
      a demonstration of tool shadowing behavior in the Model Context Protocol
      Python
      •
      MIT License
      •0•1•0•0•Updated Sep 9, 2025Sep 9, 2025