Semgrep
semgrep/semgrep
Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
From the README
Semgrep is a fast, open-source, static analysis tool that searches code, finds bugs, and enforces secure guardrails and coding standards. Semgrep supports 30+ languages and can run in an IDE, as a pre-commit check, and as part of CI/CD workflows.
- Stars
- ★ 16.7k
- Language
- OCaml
- License
- LGPL-2.1
- Last updated
- 2026-09-24
- Category
- Security & privacy
- Section
- General
