|
Less effort, more insight: Introducing Dependency Graph for Supply Chain
|
Cullen Harwood, Aaron Acosta, Leif Dreizler |
2024-12-12 |
1,012 |
--
|
|
Semgrep Supply Chain announces dataflow reachability support for 10 languages
|
Misha Kuenstner, Cullen Harwood |
2024-12-03 |
877 |
--
|
|
Bringing Semgrep Managed Scanning to GitLab: automated code scanning at scale
|
Andy Huang |
2024-11-18 |
485 |
--
|
|
Help us rename Semgrep OSS!
|
Luke O'Malley |
2024-11-01 |
414 |
--
|
|
Announcing Kotlin Reachability: Expanding the reach of Semgrep’s reachability
|
Kyle Kelly |
2024-10-28 |
552 |
--
|
|
Driving enterprise adoption of AI code security with Semgrep Assistant
|
Chushi Li, Jack Moxon |
2024-10-24 |
717 |
--
|
|
Easily create custom SAST guardrails with human language and Semgrep Assistant (AI)
|
Nitin Nayar |
2024-10-09 |
933 |
--
|
|
New insight into backlogs, developer engagement, and security posture
|
Pablo Estrada |
2024-09-19 |
592 |
--
|
|
Choosing a static analysis tool
|
Tanya Janca |
2024-09-18 |
843 |
--
|
|
Conclusion: Security Champions
|
Tanya Janca |
2024-09-11 |
404 |
--
|
|
Exploit exploitability: prioritize supply chain findings with EPSS
|
Kyle Kelly, Ben Kettle |
2024-09-07 |
691 |
--
|
|
Security Champions: Metrics & Data
|
Tanya Janca |
2024-09-06 |
670 |
--
|
|
Does your LLM thing work? (& how we use promptfoo)
|
Bence Nagy |
2024-09-06 |
2,619 |
--
|
|
Announcing AI-assisted remediation guidance on every PR
|
Chushi Li, Jack Moxon |
2024-09-05 |
1,224 |
--
|
|
Redefining security coverage for Python with framework-native analysis
|
Chushi Li |
2024-09-05 |
1,026 |
--
|
|
The tech behind Semgrep Assistant’s triage and remediation guidance
|
Chushi Li, Rohit Jayaram |
2024-08-21 |
1,355 |
4
|
|
A day in the life: Supply Chain Security Researcher
|
Misha Kuenstner |
2024-08-19 |
1,190 |
--
|
|
Bringing more Semgrep capabilities to BitBucket and Azure DevOps
|
Vivek Khimani, Andy Huang |
2024-08-16 |
458 |
--
|
|
Teaching security champions
|
Tanya Janca |
2024-08-13 |
379 |
--
|
|
Engage your champions
|
Tanya Janca |
2024-08-09 |
454 |
--
|
|
Recruiting security champions
|
Tanya Janca |
2024-08-01 |
281 |
--
|
|
Fix today’s vulnerabilities and prevent tomorrow’s with secure guardrails
|
Pablo Estrada |
2024-07-31 |
1,323 |
--
|
|
AppSec guides, not gates: Introducing secure guardrails with Semgrep
|
Isaac Evans |
2024-07-31 |
1,243 |
--
|
|
Sense and (path) sensitivity: My experience adding a new feature as a Semgrep intern
|
Katrina Liu |
2024-07-26 |
1,836 |
--
|
|
(Over)Communication with your security champions
|
Tanya Janca |
2024-07-17 |
1,041 |
--
|
|
Recognizing and rewarding security champions
|
Tanya Janca |
2024-07-14 |
783 |
--
|
|
Not just another Jira integration
|
Chushi Li |
2024-07-11 |
479 |
--
|
|
CocoaPods vulnerabilities highlight risks in dependency managers
|
Kyle Kelly |
2024-07-09 |
553 |
--
|
|
Building security champions
|
Tanya Janca |
2024-07-01 |
437 |
--
|
|
The CVE program’s new rules: will they affect your vulnerability management?
|
Kyle Kelly |
2024-06-27 |
1,181 |
--
|
|
Protect your code from the Polyfill supply chain attack
|
Pablo Estrada, Kyle Kelly |
2024-06-26 |
567 |
--
|
|
Introducing Semgrep’s Community-Oriented Twitter Account
|
Amanda McCarvill |
2024-06-13 |
343 |
--
|
|
Semgrep Quarterly Launch: scaling your AppSec impact just got easier
|
Chushi Li |
2024-05-21 |
824 |
--
|
|
Rapidly deploy code scans across your organization with Semgrep managed scanning
|
Pablo Estrada |
2024-05-21 |
594 |
--
|
|
Overrated and underperforming: transitive reachability analysis
|
Kyle Kelly |
2024-05-16 |
991 |
--
|
|
Announcing Semgrep Code Search (public beta)
|
Leif Dreizler |
2024-05-07 |
751 |
--
|
|
LSP.js: Using Wasm and JavaScript to support OCaml on Windows
|
Austin Theriault |
2024-05-02 |
2,845 |
12
|
|
Introducing Semgrep Academy: the door to cyber security for everyone
|
Tanya Janca |
2024-05-01 |
400 |
--
|
|
Structure Mode: Never write an invalid Semgrep rule again
|
Brandon Wu |
2024-04-30 |
2,012 |
--
|
|
Announcing custom rules for Semgrep Secrets
|
Leif Dreizler, Lewis Ardern |
2024-04-23 |
623 |
--
|
|
What it takes to make shift left work
|
Isaac Evans |
2024-04-16 |
610 |
--
|
|
Three key learnings for AppSec teams from the XZ backdoor
|
Jonathan Werrett |
2024-04-05 |
1,350 |
2
|
|
Securing CodeQL queries with Semgrep
|
Brandon Wu |
2024-04-01 |
1,302 |
11
|
|
10x your AppSec program with Semgrep Assistant
|
Chushi Li |
2024-03-20 |
920 |
--
|
|
Semgrep Code brings modern static analysis to C/C++
|
Chushi Li |
2024-02-27 |
1,815 |
--
|
|
Why SAST tools need to be customizable to be useful
|
Edwin Amador Artiles |
2024-02-07 |
1,541 |
--
|
|
Enhancing developer happiness: The impact of identifying code-specific issues
|
Pieter De Cremer |
2024-01-29 |
1,714 |
--
|
|
Security headers for ASP.Net and .Net CORE
|
Tanya Janca |
2024-01-24 |
483 |
--
|
|
Comparing Reachability Analysis methods: Semgrep's distinct approach
|
Kyle Kelly |
2024-01-17 |
1,049 |
--
|
|
HackerOne partners with Semgrep to combine expert code review with powerful automation
|
Isaac Evans, Alex Rice |
2024-01-11 |
336 |
--
|
