patched-codes / semgrep-rulesLinks
A collection of permissively licensed Semgrep rules.
☆17Updated last year
Alternatives and similar repositories for semgrep-rules
Users that are interested in semgrep-rules are comparing it to the libraries listed below
Sorting:
- Focused malicious code detection ruleset, with a high protection-to-noise ratio☆127Updated 8 months ago
- 🧪 Correlate Semgrep scans with Python test coverage to prioritize SAST findings and get bug fix suggestions via a self-hosted LLM.☆41Updated 10 months ago
- Manager of third-party sources of Semgrep rules 🗂☆90Updated last year
- ☆93Updated 9 months ago
- Data about all known supply-chain attacks through history☆60Updated 5 months ago
- Autogrep automates Semgrep rule generation and filtering by using LLMs to analyze vulnerability patches, enabling automatic creation of h…☆51Updated 8 months ago
- Unauthenticated enumeration of AWS IAM Roles.☆25Updated last month
- Easy-to-use Threat modeling-as-a-Code (TaaC) solution following DevSecOps principles. Simple CI/CD integration as well as console usage. …☆67Updated 4 months ago
- A security tool that detects malicious packages from external vulnerability feeds and searches for them in your package registries or art…☆61Updated 2 weeks ago
- atom is a novel intermediate representation for applications and a standalone tool that is powered by chen.☆72Updated 2 weeks ago
- A powerful tool that leverages AI to automatically generate comprehensive security documentation for your projects☆94Updated 2 weeks ago
- Build a CVE library with aggregated CISA, EPSS and CVSS data☆29Updated 2 years ago
- RedFlag uses AI to identify high-risk code changes. Run it in batch mode for release candidate testing or in CI pipelines to flag PRs and…☆153Updated 11 months ago
- ☆114Updated 2 years ago
- A small tool to help developers understand a huge set of security requirements from appsec teams☆47Updated 3 years ago
- Security tool against dependency typosquatting attacks☆54Updated last week
- Static code analyser for backdoors and malicious code in git repos using OpenAI compatible LLM APIs☆73Updated last year
- Collection of Semgrep rules for security analysis☆11Updated last year
- AI featured threat modeling and security review action☆44Updated 11 months ago
- EZGHSA is a command-line tool for summarizing and filtering vulnerability alerts on Github repositories.☆35Updated last month
- Semgrep-based Policy Controller for Kubernetes☆47Updated 6 months ago
- A lightweight library to sanitize data provided to AI tools☆28Updated 2 years ago
- A framework for understanding the capabilities of automated detection methods at identifying classes of application security vulnerabilit…☆32Updated this week
- Performing secure code review with LLMs (and vibe coding IDEs)☆28Updated 2 months ago
- ☆72Updated last week
- SecureMCP is a security auditing tool designed to detect vulnerabilities and misconfigurations in applications using the [Model Context P…☆133Updated 4 months ago
- Vulnerability database and package search for sources such as Linux, OSV, NVD, GitHub and npm. Powered by sqlite, CVE 5.1, purl, and vers…☆128Updated 2 months ago
- A comprehensive security scanner for Model Context Protocol (MCP) servers that detects vulnerabilities and security issues in your MCP se…☆103Updated last week
- Dragon-GPT uses Chat-GPT, or local LLM, to execute automatic and AI-powered threat modeling analysis on a given OWASP Threat Dragon diagr…☆40Updated 4 months ago
- Pentester-focused Docker registry tool to enumerate and pull images☆34Updated last week