Announcing Semgrep’s experimental support for Julia
Blog post from Semgrep
Semgrep, a versatile static and software composition analysis tool supporting over 25 languages, has announced experimental support for the Julia programming language as part of its mission to enhance software security across language boundaries. With a parse rate of 99.3%, nearing "beta" status, Semgrep incorporates basic functionalities like metavariables and ellipses in its matching engine. The adoption of Julia was made possible through collaboration with Avik Sengupta of JuliaHub and Sergio Vargas, who revamped the Julia tree-sitter grammar crucial for parsing. Although the Semgrep Registry currently lacks Julia-specific rules, users can create their own, such as rules for avoiding the direct opening of files in the /tmp directory and checking for unused function parameters. These efforts aim to promote best practices and improve code correctness within the Julia community.