Home / Companies / Semgrep / Blog / Post Details
Content Deep Dive

Announcing Semgrep’s support for Go in Pro Engine

Blog post from Semgrep

Post Details
Company
Date Published
Author
Milan Williams
Word Count
284
Language
English
Hacker News Points
-
Summary

Semgrep has expanded its Pro Engine to include cross-file analysis for Go (Golang), a popular programming language known for its speed and simplicity. This update is part of Semgrep's ongoing effort to enhance its code analysis capabilities across multiple languages and provide security engineers and developers with accurate and customizable tools. The introduction of 50+ new Go rules targets popular frameworks like Gin, gRPC, Gorilla, and net/http, as well as addressing potential vulnerabilities such as hardcoded secrets and command injection. Users can integrate Semgrep Pro Engine's Go support by adding a GitHub or GitLab project to Semgrep Code for automated scanning on pull or merge requests, or by upgrading to Semgrep v1.22.0 or higher for command-line usage. Semgrep encourages community feedback to guide future language support expansions.