Semgrep Code
Get Started With Semgrep Code
Semgrep Pro EngineAnalyze code across function boundaries
Pro Engine provides interprocedural analysis, including dataflow analysis methods such as taint analysis, constant propagation, and typed metavariables.
Interprocedural analysis is available for all languages supported by Semgrep and is currently experimental.
Support for enterprise languages
In addition to all the languages supported by Semgrep OSS Engine, Pro Engine also supports enterprise languages such as Apex.
Finds deep issue, more accurately
Reduces false positives: dataflow analysis features such as taint-tracking find whether, for instance, tainted user input may reach an unsafe SQL statement via a long chain of function calls
Discovers more true positives: advanced code analysis helps find more complex vulnerabilities across files and procedures
Semgrep OSS EngineSemgrep Pro EngineClick here to see the results with Semgrep Pro Engine
Please click on Semgrep OSS Engine and then on Semgrep Pro Engine to see the difference in results.
Semgrep Rule
rules:
pattern: return 1;
message: Found return value of 1
languages:
- java
foo.java
import bar.Foo
class Bar {
static final int CST = 1;
int bar_trivial() {
//Semgrep OSS will catch this:
return 1;
}
int bar_simple() {
//Semgrep OSS will catch this:
return CST;
}
int bar_intrafile() {
/*Semgrep OSS won’t catch this but Pro Engine will:*/
return Foo.CST;
}
}
bar.java
public class Foo {
final static int
CST = 1;
}
