Home / Companies / Semgrep / Blog / Post Details
Content Deep Dive

Security scanning with Semgrep in CI

Blog post from Semgrep

Post Details
Company
Date Published
Author
Holden Mcgovern
Word Count
683
Language
English
Hacker News Points
-
Summary

Semgrep is continuously enhancing its capabilities, with a focus on integrating its security scanning tool into various CI/CD workflows to streamline the process of monitoring code security. This integration allows users to leverage existing infrastructure for identifying vulnerabilities, managing findings in bulk, and preventing vulnerable code from merging, with support now extended beyond GitHub Actions and GitLab CI/CD to include Jenkins, Buildkite, Bitbucket, CircleCI, GitHub Enterprise, and GitLab Self-Managed. Users can easily configure Semgrep within these CI environments to receive scan results and PR comments. For those using other CI providers, Semgrep offers instructions on utilizing Docker images or installing via package managers. By embedding Semgrep into the CI/CD pipeline, users can continuously manage application security, and the Semgrep team is committed to further expanding support for more CI providers.