ligurio / semgrep-rules
semgrep rules for flakiness, missed error handling, Lua antipatterns and pitfalls.
☆13Updated 2 months ago
Alternatives and similar repositories for semgrep-rules:
Users that are interested in semgrep-rules are comparing it to the libraries listed below
- Custom semgrep rules registry☆11Updated 2 years ago
- 🚰 Static taint analysis for Go programs.☆59Updated 5 months ago
- Go library for sarif - Static Analysis Results Interchange Format☆70Updated last week
- ☆27Updated 8 years ago
- Docker Secure Computing Profile Generator☆47Updated 3 years ago
- Low-effort reachability analysis for third-party code vulnerabilities.☆20Updated last year
- Automatic fuzz targets generation for Golang packages☆53Updated 3 weeks ago
- Scan pypi for typosquatting☆38Updated 2 years ago
- Creates CycloneDX Software Bill-of-Materials (SBOM) from Go projects. So you can use it with DependencyTrack to monitor security issues i…☆21Updated 4 years ago
- egrets monitors egress☆46Updated 4 years ago
- ☆29Updated 3 years ago
- Static code analysis tool to find unsafe usages in Go packages and their dependencies☆42Updated 4 years ago
- A place to systematically store software bill of materials (SBOM) documents.☆44Updated last year
- 🧪 Correlate Semgrep scans with Python test coverage to prioritize SAST findings and get bug fix suggestions via a self-hosted LLM.☆38Updated last month
- Detect patterns of bad behavior in function calls☆25Updated 4 years ago
- CodeQL queries developed by Trail of Bits☆85Updated last month
- Vulnerability Scanner for Detecting Publicly Disclosed Vulnerabilities in Application Dependencies☆23Updated 5 years ago
- ☆15Updated 4 years ago
- Build custom Docker seccomp profiles for containers by finding syscalls it uses.☆89Updated 4 years ago
- Feed parsing for language package manager updates☆76Updated last month
- A tool for interacting with live processes/containers☆22Updated 2 years ago
- ☆22Updated 3 years ago
- Fuzz test Python modules with libFuzzer☆24Updated 2 years ago
- Bad packages from the pypi repository☆9Updated 6 years ago
- Plume is a code representation benchmarking library with options to extract the AST from Java bytecode and store the result in various gr…☆74Updated 3 months ago
- My custom semgrep rules☆20Updated 4 years ago
- A Security Scanner for Go☆26Updated 5 years ago
- ShiftLeft Scan is a free and open-source commercial-grade security tool for modern DevOps teams.☆13Updated 2 years ago
- Artifacts of the USENIX Security 2022 paper "Spoki: Unveiling a New Wave of Scanners through a Reactive Network Telescope"☆17Updated last month
- Go static analysis tool that checks for security issues using an AST.☆28Updated 6 years ago