Tools / product

Semgrep

LGPL-2.1 lightweight static analysis. Find bug variants with patterns that look like source code.

URL

https://semgrep.dev

GitHub

https://github.com/semgrep/semgrep

Collection

Developer Tools

Language

C

License

LGPL-2.1

Stars

17,133

Open source

Yes

static-analysissastsecurityopen-source

Used in stacks

• SonarQube / Semgrep

Ranked on

• Best open-source Security scanning