|
DevSecOps worst practices – the series
|
Tanya Janca |
2023-09-22 |
686 |
--
|
|
Announcing Semgrep Supply Chain’s beta support for C#
|
Chinmay Gaikwad |
2023-09-29 |
259 |
--
|
|
Much ado about cURL
|
Kurt Boberg |
2023-10-11 |
873 |
--
|
|
My Very, Very, VERY HONEST Internship Experience @ Semgrep
|
Charissa Kim |
2023-10-12 |
1,143 |
--
|
|
Go beyond regex: introducing Semgrep Secrets
|
Raghav Jain |
2023-10-24 |
978 |
3
|
|
Semgrep Fall '23 Launch: improved coverage + enterprise fit
|
Chushi Li |
2023-11-14 |
703 |
--
|
|
Efficient Dependency Management: Leveraging Manifest Files, Lockfiles, and SemVer Specifications
|
Kyle Kelly |
2023-11-29 |
1,033 |
--
|
|
You do not need to do DAST in a pipeline to do DevSecOps
|
Tanya Janca |
2023-12-07 |
2,042 |
--
|
|
Security scanning at ludicrous speed
|
Emma Jin |
2023-12-12 |
545 |
--
|
|
Continuous learning
|
Tanya Janca |
2024-01-04 |
1,400 |
--
|
|
HackerOne partners with Semgrep to combine expert code review with powerful automation
|
Isaac Evans, Alex Rice |
2024-01-11 |
336 |
--
|
|
Comparing Reachability Analysis methods: Semgrep's distinct approach
|
Kyle Kelly |
2024-01-17 |
1,049 |
--
|
|
Security headers for ASP.Net and .Net CORE
|
Tanya Janca |
2024-01-24 |
483 |
--
|
|
Enhancing developer happiness: The impact of identifying code-specific issues
|
Pieter De Cremer |
2024-01-29 |
1,714 |
--
|
|
Why SAST tools need to be customizable to be useful
|
Edwin Amador Artiles |
2024-02-07 |
1,541 |
--
|
|
Semgrep Code brings modern static analysis to C/C++
|
Chushi Li |
2024-02-27 |
1,815 |
--
|
|
10x your AppSec program with Semgrep Assistant
|
Chushi Li |
2024-03-20 |
920 |
--
|
|
Securing CodeQL queries with Semgrep
|
Brandon Wu |
2024-04-01 |
1,302 |
11
|
|
Three key learnings for AppSec teams from the XZ backdoor
|
Jonathan Werrett |
2024-04-05 |
1,350 |
2
|
|
What it takes to make shift left work
|
Isaac Evans |
2024-04-16 |
610 |
--
|
|
Announcing custom rules for Semgrep Secrets
|
Leif Dreizler, Lewis Ardern |
2024-04-23 |
623 |
--
|
|
Structure Mode: Never write an invalid Semgrep rule again
|
Brandon Wu |
2024-04-30 |
2,012 |
--
|
|
Introducing Semgrep Academy: the door to cyber security for everyone
|
Tanya Janca |
2024-05-01 |
400 |
--
|
|
LSP.js: Using Wasm and JavaScript to support OCaml on Windows
|
Austin Theriault |
2024-05-02 |
2,845 |
12
|
|
Announcing Semgrep Code Search (public beta)
|
Leif Dreizler |
2024-05-07 |
751 |
--
|
|
Overrated and underperforming: transitive reachability analysis
|
Kyle Kelly |
2024-05-16 |
991 |
--
|
|
Semgrep Quarterly Launch: scaling your AppSec impact just got easier
|
Chushi Li |
2024-05-21 |
824 |
--
|
|
Rapidly deploy code scans across your organization with Semgrep managed scanning
|
Pablo Estrada |
2024-05-21 |
594 |
--
|
|
Introducing Semgrep’s Community-Oriented Twitter Account
|
Amanda McCarvill |
2024-06-13 |
343 |
--
|
|
Protect your code from the Polyfill supply chain attack
|
Pablo Estrada, Kyle Kelly |
2024-06-26 |
567 |
--
|
|
The CVE program’s new rules: will they affect your vulnerability management?
|
Kyle Kelly |
2024-06-27 |
1,181 |
--
|
|
Building security champions
|
Tanya Janca |
2024-07-01 |
437 |
--
|
|
CocoaPods vulnerabilities highlight risks in dependency managers
|
Kyle Kelly |
2024-07-09 |
553 |
--
|
|
Not just another Jira integration
|
Chushi Li |
2024-07-11 |
479 |
--
|
|
Recognizing and rewarding security champions
|
Tanya Janca |
2024-07-14 |
783 |
--
|
|
(Over)Communication with your security champions
|
Tanya Janca |
2024-07-17 |
1,041 |
--
|
|
Sense and (path) sensitivity: My experience adding a new feature as a Semgrep intern
|
Katrina Liu |
2024-07-26 |
1,836 |
--
|
|
Fix today’s vulnerabilities and prevent tomorrow’s with secure guardrails
|
Pablo Estrada |
2024-07-31 |
1,323 |
--
|
|
AppSec guides, not gates: Introducing secure guardrails with Semgrep
|
Isaac Evans |
2024-07-31 |
1,243 |
--
|
|
Recruiting security champions
|
Tanya Janca |
2024-08-01 |
281 |
--
|
|
Engage your champions
|
Tanya Janca |
2024-08-09 |
454 |
--
|
|
Teaching security champions
|
Tanya Janca |
2024-08-13 |
379 |
--
|
|
Bringing more Semgrep capabilities to BitBucket and Azure DevOps
|
Vivek Khimani, Andy Huang |
2024-08-16 |
458 |
--
|
|
A day in the life: Supply Chain Security Researcher
|
Misha Kuenstner |
2024-08-19 |
1,190 |
--
|
|
The tech behind Semgrep Assistant’s triage and remediation guidance
|
Chushi Li, Rohit Jayaram |
2024-08-21 |
1,355 |
4
|
|
Announcing AI-assisted remediation guidance on every PR
|
Chushi Li, Jack Moxon |
2024-09-05 |
1,224 |
--
|
|
Redefining security coverage for Python with framework-native analysis
|
Chushi Li |
2024-09-05 |
1,026 |
--
|
|
Security Champions: Metrics & Data
|
Tanya Janca |
2024-09-06 |
670 |
--
|
|
Does your LLM thing work? (& how we use promptfoo)
|
Bence Nagy |
2024-09-06 |
2,619 |
--
|
|
Exploit exploitability: prioritize supply chain findings with EPSS
|
Kyle Kelly, Ben Kettle |
2024-09-07 |
691 |
--
|
