Manager of 14 third-party sources comprising approximately 4,000 Semgrep rules 🗂
☆116Dec 24, 2025Updated 6 months ago
Alternatives and similar repositories for semgrep-rules-manager
Users that are interested in semgrep-rules-manager are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Curated Collection of Popular Community Rules for Semgrep☆21Dec 27, 2023Updated 2 years ago
- Semgrep queries developed by Trail of Bits.☆515May 7, 2026Updated last month
- Semgrep Community Edition rules, maintained by Semgrep and the community. Free to use under the Semgrep Rules License.☆1,197Updated this week
- An extension to use Semgrep inside Burp Suite.☆90May 23, 2025Updated last year
- Collection of Semgrep rules for security analysis☆10Mar 30, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆246Jun 23, 2026Updated last week
- Run CodeQL queries at scale using Multi-Repository Variant Analysis (MRVA)☆68Apr 16, 2025Updated last year
- A blazing-fast, thread-safe, straightforward and zero memory allocations tool to swiftly generate alternative IP(v4) address representati…☆93Aug 25, 2023Updated 2 years ago
- HashiCorp-relevant rules for the Semgrep code analysis tool☆42Oct 3, 2023Updated 2 years ago
- MCP Server Semgrep is a [Model Context Protocol](https://modelcontextprotocol.io) compliant server that integrates the powerful Semgrep s…☆29Jun 29, 2026Updated last week
- A collection of my Semgrep rules to facilitate vulnerability research.☆829Jun 15, 2026Updated 3 weeks ago
- Gram is Klarna's own threat model diagramming tool☆334Updated this week
- Firefox extension that shows parquet schema when going over GCP cloud storage. Use DuckDB WASM☆12Jan 19, 2024Updated 2 years ago
- An implementation of infrastructure-as-code scanning using dynamic tooling.☆56Jan 18, 2022Updated 4 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Semgrep rules corresponding to the OWASP ASVS standard☆27Nov 2, 2020Updated 5 years ago
- Autogrep automates Semgrep rule generation and filtering by using LLMs to analyze vulnerability patches, enabling automatic creation of h…☆87Feb 27, 2025Updated last year
- GitleaksVerifier is a Python-based verification tool designed to enhance the functionality of Gitleaks by rigorously validating secrets f…☆29Mar 9, 2025Updated last year
- ☆78Oct 18, 2025Updated 8 months ago
- SARIF Explorer: A VSCode extension that helps you visualize and triage static analysis results☆52Jun 19, 2026Updated 2 weeks ago
- A python-based padding oracle tool☆20Mar 31, 2026Updated 3 months ago
- Tool to detect and monitor GitHub org users' public repositories for secrets and sensitive files☆232Apr 17, 2026Updated 2 months ago
- ☆38Apr 24, 2024Updated 2 years ago
- Remove duplicate URLs by retaining only the unique combinations of hostname, path, and parameter names☆39May 5, 2024Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A Python-based tool to create zip, tar and cpio archives to exploit common archive library issues and developer mistakes☆43Nov 28, 2025Updated 7 months ago
- Secrets scanner that understands code☆192Nov 2, 2023Updated 2 years ago
- Automatically look for paramater reflections in the HTTP response☆17Apr 30, 2025Updated last year
- Example of a vulnerable NodeJS+Express+MySQL service☆20Jan 17, 2023Updated 3 years ago
- Utility to analyse, ingest and push out credentials from common data sources during an internal penetration test.☆19Jun 12, 2022Updated 4 years ago
- My collection of Semgrep rules for vulnerability detection on source code (swift, java, cobol)☆44Dec 3, 2025Updated 7 months ago
- Tricard - Malware Sandbox Fingerprinting☆23Dec 11, 2023Updated 2 years ago
- Quickly collect data from thousands of exposed Elasticsearch or Kibana instances and generate a report to be analysed.☆30Jan 7, 2022Updated 4 years ago
- Simplify and speed up common tasks in your ORT-based FOSS review workflows☆13Apr 16, 2026Updated 2 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Repo for hosting rayder workflows☆63Aug 31, 2023Updated 2 years ago
- Common Corpus is used to build coverage-minimized corpus data sets for fuzzing.☆29Aug 16, 2023Updated 2 years ago
- Archive Alchemist is a tool for creating specially crafted archives to test extraction vulnerabilities.☆237Jul 24, 2025Updated 11 months ago
- LPE of CVE-2024-26230☆23Sep 1, 2024Updated last year
- Unsecure time-based secret exploitation and Sandwich attack implementation Resources☆149Dec 9, 2024Updated last year
- Finding security vulnerabilities with CodeQL in C/C++☆14Mar 25, 2021Updated 5 years ago
- ☆11Oct 16, 2021Updated 4 years ago