Skip to content

@semgrep Semgrep

Change the repository type filter

All

    Repositories list

    145 repositories

    • convert-nuget

      Public
      NuGet/dotnet packages.config to packages.lock.json converter
      JavaScript
      •
      MIT License
      •0•1•0•1•Updated Apr 23, 2026Apr 23, 2026

    • semgrep-benchmark-lichess-lila

      Public
      ♞ lichess.org: the forever free, adless and open source chess server ♞
      Scala
      •
      GNU Affero General Public License v3.0
      •0•0•0•3•Updated Apr 23, 2026Apr 23, 2026

    • semgrep-rules

      Public
      Semgrep Community Edition rules, maintained by Semgrep and the community. Free to use under the Semgrep Rules License.
      securitystatic-analysisprogram-analysis
      securitystatic-analysisprogram-analysissecurity-scannergrep-likesemgrepsemgrep-rulessemgrep-registry
      HCL
      •
      Other
      •521•1.1k•75•77•Updated Apr 23, 2026Apr 23, 2026

    • semgrep

      Public
      Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
      javascriptrubypython
      javascriptrubypythoncjavagotypescriptstatic-code-analysisstatic-analysissast
      OCaml
      •
      GNU Lesser General Public License v2.1
      •919•15k•843•24•Updated Apr 23, 2026Apr 23, 2026

    • e2e

      Public
      [MISSING DESCRIPTION]
      Shell
      •0•2•0•1.5k•Updated Apr 22, 2026Apr 22, 2026

    • semgrep-interfaces

      Public
      Store the ATD/openapi/protobuf/... interfaces between semgrep components
      Python
      •
      GNU Lesser General Public License v2.1
      •14•18•1•1•Updated Apr 22, 2026Apr 22, 2026

    • semgrep-docs

      Public
      Documentation of Semgrep: a fast, open-source, static analysis tool.
      semgrep
      semgrep
      MDX
      •
      GNU Lesser General Public License v2.1
      •114•51•9•10•Updated Apr 22, 2026Apr 22, 2026

    • camldn

      Public
      OCaml
      •0•0•0•1•Updated Apr 22, 2026Apr 22, 2026

    • semgrep-typescript

      Public
      generated TypeScript parser for semgrep
      C
      •3•2•0•1•Updated Apr 21, 2026Apr 21, 2026

    • ocaml-tree-sitter-semgrep

      Public
      Generate parsers from tree-sitter grammars extended to support Semgrep patterns
      Move
      •
      GNU General Public License v3.0
      •20•12•10•9•Updated Apr 21, 2026Apr 21, 2026

    • semgrep-network-broker

      Public
      Facilitates network access between Semgrep and on-prem resources
      Go
      •
      MIT License
      •5•10•0•4•Updated Apr 20, 2026Apr 20, 2026

    • skills

      Public
      A collection of skills for AI coding agents from Semgrep
      securityskillsagents
      securityskillsagentsclaude-code
      JavaScript
      •
      Other
      •25•191•0•3•Updated Apr 20, 2026Apr 20, 2026

    • ocaml-tree-sitter-core

      Public
      OCaml code generator and runtime library for handling typed tree-sitter CSTs
      OCaml
      •
      GNU Lesser General Public License v2.1
      •11•49•7•9•Updated Apr 17, 2026Apr 17, 2026

    • ocaml-cohttp

      Public
      An OCaml library for HTTP clients and servers using Lwt or Async
      OCaml
      •
      Other
      •183•0•0•0•Updated Apr 17, 2026Apr 17, 2026

    • mythos-bench

      Public
      Jagged Frontier: LLM vulnerability detection benchmark harnesses (API + Claude Code agentic)
      Python
      •1•6•0•0•Updated Apr 17, 2026Apr 17, 2026

    • setup-ocaml

      Public
      GitHub Action for the OCaml programming language (Semgrep Fork)
      TypeScript
      •
      MIT License
      •47•0•0•8•Updated Apr 15, 2026Apr 15, 2026

    • ocaml

      Public
      The core OCaml system: compilers, runtime system, base libraries
      OCaml
      •
      Other
      •1.2k•0•0•1•Updated Apr 15, 2026Apr 15, 2026

    • semgrep-scala

      Public
      generated scala parser for semgrep
      no-archive-2026
      no-archive-2026
      C
      •0•0•0•0•Updated Apr 14, 2026Apr 14, 2026

    • homebrew-core

      Public
      🍻 Default formulae for the missing package manager for macOS (or Linux)
      Ruby
      •
      BSD 2-Clause "Simplified" License
      •14k•0•0•0•Updated Apr 13, 2026Apr 13, 2026

    • semgrep-vscode

      Public
      Semgrep extension for Visual Studio Code
      vscodevisual-studio-codevscode-extension
      vscodevisual-studio-codevscode-extensionsemgrep
      TypeScript
      •
      GNU Lesser General Public License v2.1
      •28•76•14•4•Updated Apr 10, 2026Apr 10, 2026

    • mcp-marketplace

      Public
      Home for the Semgrep Claude Code Plugin.
      Shell
      •3•3•4•2•Updated Apr 10, 2026Apr 10, 2026

    • pre-commit

      Public
      Pre-commit hooks to run Semgrep
      Shell
      •
      GNU Lesser General Public License v2.1
      •4•6•3•5•Updated Apr 10, 2026Apr 10, 2026

    • semgrep-intellij

      Public
      Kotlin
      •
      GNU Lesser General Public License v2.1
      •4•7•2•17•Updated Apr 9, 2026Apr 9, 2026

    • cve-2026-22732-demo

      Public
      Minimal reproduction of CVE-2026-22732 — Spring Security HTTP headers silently dropped
      Java
      •0•0•0•0•Updated Apr 7, 2026Apr 7, 2026

    • cursor-plugin

      Public
      Home for the Semgrep Cursor Plugin.
      0•0•0•0•Updated Apr 7, 2026Apr 7, 2026

    • semgrep-ocaml-visitors

      Public
      A implementation of OCaml's `visitors`
      OCaml
      •0•0•0•0•Updated Apr 3, 2026Apr 3, 2026

    • obackward

      Public
      C++
      •0•0•0•1•Updated Apr 3, 2026Apr 3, 2026

    • semgrep-verify-fix

      Public
      semgrep-verify-fix (sgvf) is a CLI tool that confirms a security finding present on the default branch has been resolved in a local working copy or branch.
      Python
      •
      MIT License
      •0•0•0•0•Updated Apr 3, 2026Apr 3, 2026

    • highlife

      Public
      The champagne of homebrew tools
      Go
      •
      Apache License 2.0
      •0•0•0•0•Updated Mar 30, 2026Mar 30, 2026

    • ai-best-practices

      Public
      Semgrep Pro Rules to ensure code using LLMs is following best practices
      Other
      •6•69•0•0•Updated Mar 25, 2026Mar 25, 2026
    ProTip! When viewing an organization's repositories, you can use the props. filter to filter by custom property.