|
The best free, open-source supply-chain security tool? The lockfile
|
Isaac Evans |
2022-01-20 |
1,531 |
--
|
|
The OWASP API Security Top Ten: API1:2019 Broken Object Level Authorization
|
Tanya Janca |
2022-01-28 |
838 |
--
|
|
Keep your rules simple with symbolic propagation
|
Iago Abal |
2022-02-07 |
490 |
--
|
|
Semgrep's February 2022 Updates
|
Chinmay Gaikwad |
2022-02-10 |
962 |
--
|
|
Scaling Semgrep rule coverage by spidering language documentation
|
Kurt Boberg |
2022-03-10 |
1,003 |
--
|
|
Semgrep Spring 2022 meetup recap
|
Emily Fortuna |
2022-04-06 |
1,530 |
--
|
|
Tips and tricks for writing fixes
|
Pieter De Cremer |
2022-04-18 |
834 |
--
|
|
Semgrep's May 2022 updates
|
Chinmay Gaikwad |
2022-05-11 |
878 |
--
|
|
Introducing DeepSemgrep
|
Isaac Evans |
2022-05-24 |
1,082 |
--
|
|
Write custom rules with the new Playground
|
Milan Williams |
2022-06-14 |
449 |
--
|
|
Announcing Semgrep's general availability support of PHP
|
Pablo Estrada |
2022-06-22 |
215 |
--
|
|
My experience interning at r2c
|
Vivek Khimani |
2022-06-30 |
1,127 |
--
|
|
Security scanning with Semgrep in CI
|
Holden Mcgovern |
2022-07-20 |
683 |
--
|
|
Testing autofix behavior of SAST rules
|
Pieter De Cremer |
2022-08-03 |
1,410 |
--
|
|
Shoulda, Woulda...Coulda
|
Lewis Ardern |
2022-08-16 |
454 |
--
|
|
Demystifying Taint Mode
|
Emily Fortuna |
2022-09-01 |
814 |
--
|
|
Announcing Semgrep's experimental support of Swift
|
Nat Mote |
2022-09-06 |
280 |
--
|
|
Software supply chain security is hard
|
Andy Huang |
2022-09-28 |
992 |
--
|
|
It's time to ignore 98% of dependency alerts. Introducing Semgrep Supply Chain.
|
Adam Berman |
2022-10-04 |
876 |
--
|
|
Fully loaded: testing vulnerable PyYAML versions
|
Grayson Hardaway |
2022-10-06 |
947 |
--
|
|
A deep dive into Semgrep Supply Chain
|
Kurt Boberg |
2022-10-13 |
1,683 |
--
|
|
Powerfully autofixing code with Semgrep's new AST-based approach
|
Nat Mote |
2022-11-03 |
1,128 |
--
|
|
Building an enterprise-ready, scalable security program using Semgrep
|
Jason Lim, Chinmay Gaikwad |
2022-11-18 |
925 |
--
|
|
Need for speed: static analysis version
|
Brandon Wu |
2022-11-29 |
2,140 |
2
|
|
Releasing Semgrep 1.0
|
Yoann Padioleau |
2022-12-01 |
1,180 |
--
|
|
XML Security in Java
|
Pieter De Cremer |
2023-01-17 |
2,263 |
--
|
|
Announcing Semgrep Code: SAST designed and built for engineers
|
Raghav Jain |
2023-02-14 |
781 |
2
|
|
Developer-focused results and improved coverage with Semgrep Pro rules
|
Claudio Merloni |
2023-02-24 |
1,253 |
--
|
|
Announcing Semgrep’s beta support for Rust
|
Matt Schwager |
2023-03-01 |
329 |
1
|
|
Using AI to write secure code with Semgrep
|
Raja Rao Dv |
2023-04-04 |
657 |
--
|
|
We put GPT-4 in Semgrep to point out false positives & fix code
|
Bence Nagy |
2023-04-04 |
1,635 |
2
|
|
The birth of Semgrep Pro Engine
|
Colleen Dai, Emma Jin |
2023-04-10 |
3,124 |
--
|
|
Semgrep, a code & supply chain security search engine, raises Series C
|
Isaac Evans |
2023-04-18 |
949 |
--
|
|
Announcing Semgrep’s experimental support for Julia
|
Brandon Wu |
2023-05-03 |
378 |
--
|
|
Announcing Semgrep’s support for Go in Pro Engine
|
Milan Williams |
2023-05-26 |
284 |
--
|
|
Semgrep now supports Cairo 1.0
|
Romain Jufer |
2023-05-30 |
485 |
--
|
|
Unlocking advanced security for all: Semgrep’s latest update
|
Luke O'Malley |
2023-06-06 |
917 |
--
|
|
The journey of a language from experimental to GA in Semgrep
|
Brandon Wu, Enno Liu |
2023-06-06 |
1,029 |
--
|
|
Cross-compiling OCaml to JS and Wasm: How we made the Semgrep Playground Fast
|
Tom Petr |
2023-06-06 |
1,449 |
5
|
|
Expanding Semgrep Supply Chain into Dependency Intelligence and License Compliance
|
Bence Nagy, Andy Huang |
2023-06-07 |
773 |
--
|
|
Semgrep’s VS Code extension: powerful SAST as fast as linting
|
Austin Theriault |
2023-06-08 |
931 |
4
|
|
How we resolved the ‘HTTP request failed: timeout’ issue in OCaml
|
Hannes Mehnert |
2023-07-05 |
1,859 |
4
|
|
AI & Cybersecurity: Learnings from three months of Semgrep Assistant
|
Bence Nagy |
2023-07-18 |
1,599 |
--
|
|
The indomitable maintainer spirit versus the indifferent cruelty of JavaScript
|
Max Vonblankenburg |
2023-07-26 |
1,298 |
--
|
|
Why We Hack Purple and I are joining Semgrep
|
Tanya Janca |
2023-08-04 |
691 |
--
|
|
Guardrails for PromQL using Semgrep
|
Michael Hoffmann |
2023-08-08 |
868 |
14
|
|
The Difference Between SCA and Supply Chain Security
|
Tanya Janca |
2023-08-22 |
1,026 |
--
|
|
Choosing API Security Tools
|
Tanya Janca |
2023-09-01 |
723 |
--
|
|
Should security engineers care about transitive supply chain vulnerabilities?
|
Kyle Kelly |
2023-09-07 |
1,578 |
--
|
|
Preventing secrets in code
|
Tanya Janca |
2023-09-11 |
1,396 |
--
|