ligurio / semgrep-rulesLinks
semgrep rules for flakiness, missed error handling, Lua antipatterns and pitfalls.
ā14Updated 7 months ago
Alternatives and similar repositories for semgrep-rules
Users that are interested in semgrep-rules are comparing it to the libraries listed below
Sorting:
- š° Static taint analysis for Go programs.ā65Updated 2 weeks ago
- Automatic fuzz targets generation for Golang packagesā53Updated 5 months ago
- Custom semgrep rules registryā12Updated 2 years ago
- Go library for SARIF - Static Analysis Results Interchange Formatā79Updated last week
- Old coverage-guided fuzz testing for fxamacker/cbor. A newer version is used by fxamacker/cbor for fuzzing.ā11Updated last year
- ā29Updated 4 months ago
- A place to systematically store software bill of materials (SBOM) documents.ā46Updated 2 years ago
- Function callpath mapping analysis tool for Goā34Updated 3 months ago
- ā29Updated last year
- Scan pypi for typosquattingā36Updated 2 years ago
- egrets monitors egressā46Updated 5 years ago
- Low-effort reachability analysis for third-party code vulnerabilities.ā20Updated last year
- Detect compiler names and versions from ELF filesā27Updated last month
- Vulnerability Scanner for Detecting Publicly Disclosed Vulnerabilities in Application Dependenciesā23Updated 5 years ago
- ā22Updated 3 years ago
- Docker Secure Computing Profile Generatorā48Updated 3 years ago
- ā15Updated 5 years ago
- A Server Side Request Forgery (SSRF) protection library. Made with š¤ by Doyensec LLC.ā102Updated 3 weeks ago
- Semgrep extension for Visual Studio Codeā63Updated this week
- ā16Updated last year
- Bad packages from the pypi repositoryā9Updated 6 years ago
- Corpus for github.com/dvyukov/go-fuzz examplesā199Updated 4 years ago
- Creates CycloneDX Software Bill-of-Materials (SBOM) from Go projects. So you can use it with DependencyTrack to monitor security issues iā¦ā21Updated 5 years ago
- ā20Updated 9 months ago
- A tool for interacting with live processes/containersā22Updated 2 years ago
- ā20Updated 2 years ago
- Documentation of Semgrep: a fast, open-source, static analysis tool.ā41Updated last week
- A CLI tool to analyze the behavior of your dependencies using listen.devā12Updated last week
- CodeQL queries developed by Trail of Bitsā101Updated 2 weeks ago
- BPF based FIM solutionā42Updated 2 years ago