Welcome to the Semgrep blog

Code analysis at ludicrous speed

SearchBox Icon
announcements
Releasing Semgrep 1.0

Announcing a milestone release: Semgrep 1.0

Yoann Padioleau
Yoann Padioleau
December 01, 2022 read
semgrep 1.0 blog post
development
Need for speed: static analysis version

Why speed is important in static analysis and how Semgrep achieves ludicrous speed

Brandon Wu
Brandon Wu
November 29, 2022 read
Semgrep scan times
best practices
Tips and tricks for writing fixes

A few tips you might not know to improve your Semgrep usage

Pieter De Cremer
Pieter De Cremer
April 18, 2022 read
Tips and tricks for writing fixes thumbnail
security
Software supply chain security is hard

See why today's SCA tools are noisy and how can you leverage reachability to reduce the noise

Andy Huang
Andy Huang
September 28, 2022 read
Blog Card - image
announcements
It's time to ignore 98% of dependency alerts. Introducing Semgrep Supply Chain.

Based on the Semgrep engine, Semgrep Supply Chain finds reachable vulnerable dependencies in your code

Adam Berman
Adam Berman
October 04, 2022 read
Blog Card - image
announcements
Releasing Semgrep 1.0

Announcing a milestone release: Semgrep 1.0

Yoann Padioleau
Yoann Padioleau
December 01, 2022 read
semgrep 1.0 blog post
development
Need for speed: static analysis version

Why speed is important in static analysis and how Semgrep achieves ludicrous speed

Brandon Wu
Brandon Wu
November 29, 2022 read
Semgrep scan times
best practices
Tips and tricks for writing fixes

A few tips you might not know to improve your Semgrep usage

Pieter De Cremer
Pieter De Cremer
April 18, 2022 read
Tips and tricks for writing fixes thumbnail
security
Software supply chain security is hard

See why today's SCA tools are noisy and how can you leverage reachability to reduce the noise

Andy Huang
Andy Huang
September 28, 2022 read
Blog Card - image
announcements
It's time to ignore 98% of dependency alerts. Introducing Semgrep Supply Chain.

Based on the Semgrep engine, Semgrep Supply Chain finds reachable vulnerable dependencies in your code

Adam Berman
Adam Berman
October 04, 2022 read
Blog Card - image
announcements
Releasing Semgrep 1.0

Announcing a milestone release: Semgrep 1.0

Yoann Padioleau
Yoann Padioleau
December 01, 2022 read
semgrep 1.0 blog post
development
Need for speed: static analysis version

Why speed is important in static analysis and how Semgrep achieves ludicrous speed

Brandon Wu
Brandon Wu
November 29, 2022 read
Semgrep scan times
best practices
Tips and tricks for writing fixes

A few tips you might not know to improve your Semgrep usage

Pieter De Cremer
Pieter De Cremer
April 18, 2022 read
Tips and tricks for writing fixes thumbnail
security
Software supply chain security is hard

See why today's SCA tools are noisy and how can you leverage reachability to reduce the noise

Andy Huang
Andy Huang
September 28, 2022 read
Blog Card - image
announcements
It's time to ignore 98% of dependency alerts. Introducing Semgrep Supply Chain.

Based on the Semgrep engine, Semgrep Supply Chain finds reachable vulnerable dependencies in your code

Adam Berman
Adam Berman
October 04, 2022 read
Blog Card - image
Categories
  • All
  • security
  • announcements
  • development
  • tips and tricks
  • best practices
  • meetups
RSS Image
Subscribe via RSS

Categories

Latest posts
xml-java
security
January 17, 2023
XML Security in Java
Pieter De Cremer
Pieter De Cremer
semgrep 1.0 blog post
announcements
December 01, 2022
Releasing Semgrep 1.0
Yoann Padioleau
Yoann Padioleau
Semgrep scan times
development
November 29, 2022
Need for speed: static analysis version
Brandon Wu
Brandon Wu
findings page as of dec 22
security
November 18, 2022
Building an enterprise-ready, scalable security program using Semgrep
Portrait of ChinmayJason lim
Jason Lim,Chinmay Galkwad
autofix-nat
tips and tricks
November 03, 2022
Powerfully autofixing code with Semgrep's new AST-based approach
Nat Mote
Nat Mote
Introducing Semgrep Supply Chain
security
October 13, 2022
A deep dive into Semgrep Supply Chain
Kurt Boberg
Kurt Boberg
Super Smash Bros x Python
security
October 06, 2022
Fully loaded: testing vulnerable PyYAML versions
grayson dp
Grayson Hardaway
Blog Card - image
announcements
October 04, 2022
It's time to ignore 98% of dependency alerts. Introducing Semgrep Supply Chain.
Adam Berman
Adam Berman

Static analysis at ludicrous speed

Find Bugs and Enforce Code Standards

Lorem ipsum dolor sit amet, consectetur adipiscing elit.

Code analysis at ludicrous speed

Resources

Docs
Tutorial
Blog
About us
Contact us

Products

Semgrep App
Semgrep Supply Chain
Pricing

© 2023 r2c. Semgrep is a registered trademark of r2c.

Semgrep jobsTermsPrivacy