Manager of 14 third-party sources comprising approximately 4,000 Semgrep rules 🗂
☆122Dec 24, 2025Updated 10 months ago
Alternatives and similar repositories for semgrep-rules-manager
Users that are interested in semgrep-rules-manager are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Semgrep queries developed by Trail of Bits.☆535May 7, 2026Updated 6 months ago
- ☆14Jan 29, 2026Updated 9 months ago
- Autogrep automates Semgrep rule generation and filtering by using LLMs to analyze vulnerability patches, enabling automatic creation of h…☆93Feb 27, 2025Updated last year
- Semgrep Community Edition rules, maintained by Semgrep and the community. Free to use under the Semgrep Rules License.☆1,293Updated this week
- A collection of permissively licensed Semgrep rules.☆26Jul 5, 2024Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆247Oct 27, 2026Updated last week
- A collection of my Semgrep rules to facilitate vulnerability research.☆882Updated this week
- A collection of Semgrep rules derived from the OWASP MASTG specifically for Android applications.☆345Jun 5, 2026Updated 5 months ago
- An extension to use Semgrep inside Burp Suite.☆89May 23, 2025Updated last year
- A terminal-first approach to CodeQL multi-repo variant analysis☆19Sep 30, 2026Updated last month
- Function callpath mapping analysis tool for Go☆34Oct 1, 2026Updated last month
- An implementation of infrastructure-as-code scanning using dynamic tooling.☆56Jan 18, 2022Updated 4 years ago
- Gram is Klarna's own threat model diagramming tool☆337Updated this week
- This repository contains all the examples related to a series of tutorials that demonstrate how to use the new Montoya API of Burp Suite …☆53May 5, 2026Updated 6 months ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Python implementation of SafeURL (Anti-SSRF Lib)☆11Aug 29, 2024Updated 2 years ago
- ☆12Apr 21, 2019Updated 7 years ago
- Data race skeletons from Uber's Go codebase for research in concurrency bug detection and analysis.☆11May 27, 2025Updated last year
- A collection of my weggli patterns to facilitate vulnerability research.☆160Aug 2, 2026Updated 3 months ago
- OSS clone of Anthropic’s Mythos harness to locate C/C++ memory vulnerabilities☆13Apr 17, 2026Updated 6 months ago
- Run CodeQL queries at scale using Multi-Repository Variant Analysis (MRVA)☆70Jul 3, 2026Updated 4 months ago
- VulnMiner: A Comprehensive Framework for Vulnerability Detection in C/C++ Source Code☆13Apr 24, 2024Updated 2 years ago
- LLMs for autonomous generate rules☆12Apr 25, 2025Updated last year
- A blazing-fast, thread-safe, straightforward and zero memory allocations tool to swiftly generate alternative IP(v4) address representati…☆94Oct 30, 2026Updated last week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- SARIF Explorer: A VSCode extension that helps you visualize and triage static analysis results☆57Updated this week
- AI Deep SAST - LLM-powered deep static analysis for CI/CD. Combines Semgrep, tree-sitter code indexing and frontier LLMs (e.g. GPT-4o, Cl…☆66Jun 10, 2026Updated 4 months ago
- ☆10Jul 9, 2020Updated 6 years ago
- 🔎 Static code analysis engine to find security issues in code.☆3,296Updated this week
- HashiCorp-relevant rules for the Semgrep code analysis tool☆42Oct 3, 2023Updated 3 years ago
- CFG and scripts for fuzzing the PHP interpreter with Domato☆28Jan 4, 2020Updated 6 years ago
- Repro for Confusion Attacks: Exploiting Hidden Semantic Ambiguity in Apache HTTP Server!☆21Aug 25, 2024Updated 2 years ago
- Exploits for the house of IO class of vulnerabilities☆14Oct 10, 2021Updated 5 years ago
- SAST + LLM Interprocedural Context Extractor☆213Oct 28, 2025Updated last year
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Collection of rules for Static Application Security Testing (SAST) with Semgrep☆13Apr 16, 2025Updated last year
- Golem automates C/C++ vulnerability discovery with SemGrep+LLVM+LLM☆102Aug 23, 2026Updated 2 months ago
- Automated least-privilege enforcement for AWS IAM. Analyzes CloudTrail data to compute permission utilization metrics and generates polic…☆13Jan 12, 2026Updated 9 months ago
- Secrets scanner that understands code☆192Nov 2, 2023Updated 3 years ago
- A collection of Semgrep rules which followed security guidelines for .NET and Java.☆24Oct 4, 2021Updated 5 years ago
- Structural search for Rust☆15Nov 4, 2025Updated last year
- Recurrent Neural Network SubDomain Discovery Tool☆97Sep 20, 2022Updated 4 years ago