Skip to main content


Several third-party tools include Semgrep extensions.



The pre-commit framework can run semgrep at commit-time. Install pre-commit and add the following to .pre-commit-config.yaml

repos:- repo:  rev: 'v0.60.0'  hooks:    - id: semgrep      # See to select a ruleset and copy its URL      args: ['--config', '<SEMGREP_RULESET_URL>', '--error']

Version management#

Semgrep as an engine#

Many other tools have functionality powered by Semgrep. Add yours with a pull request!

Find what you needed in this doc? Join the Slack group to ask the maintainers and the community if you need help.