Home / Companies / Semgrep / Blog / Post Details
Content Deep Dive

Bringing more Semgrep capabilities to BitBucket and Azure DevOps

Blog post from Semgrep

Post Details
Company
Date Published
Author
Vivek Khimani, Andy Huang
Word Count
458
Language
English
Hacker News Points
-
Summary

Semgrep has expanded its capabilities to integrate with Atlassian BitBucket Cloud, BitBucket Data Center, and Microsoft Azure DevOps, addressing developers' challenges of seamlessly incorporating security into their workflows. This integration includes features such as PR comments for security findings and hard-coded secrets, which appear directly within pull requests to minimize context switching and expedite remediation. Additionally, it introduces license violation comments to ensure compliant dependencies and provides hyperlinks for tracing vulnerabilities back to their source, enhancing the efficiency of AppSec professionals. The Network Broker facilitates secure connectivity for self-hosted BitBucket Data Center instances, enabling interaction with private networks without exposure to the internet. These enhancements aim to improve the developer experience by embedding security into the development process, supporting organizations in addressing security issues early and maintaining productivity.