returntocorp/semgrep

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

202 best points · 47 comments · 7 Hacker News posts · 17,533 GitHub stars · View on GitHub

Hacker News discussions

• Semgrep: Lightweight static analysis for many languages (202 points, 28 comments, by kiyanwang, 2020-07-22)
• Semgrep: JavaScript browser security concat bypass not detected (81 points, 17 comments, by pavel_lishin, 2021-02-01)
• Like Grep but for Code (16 points, 2 comments, by mooreds, 2020-05-05)
• Like Grep, but for Code (5 points, 0 comments, by todsacerdoti, 2020-05-07)
• Like Grep but for Code (4 points, 0 comments, by mooreds, 2020-06-15)
• Fast and syntax-aware semantic code pattern search (3 points, 0 comments, by bsg75, 2020-05-08)
• Intentionally Writing Bad Code (1 points, 0 comments, by throwaway69mk, 2021-01-20)