Today, we have added two new features that make our Semgrep Supply Chain product more powerful: Dependency Search and License Compliance.

You can mitigate supply chain vulnerabilities before a CVE even drops with Dependency Search and enforce your organization's license policies on pull requests with License Compliance.

We’re launching the official Semgrep VS Code Extension! You can run Semgrep Code and Supply Chain on every save for instant developer feedback, saving you time waiting for CI/CD results.