Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
- Stars
- 38.6k
- Growth
- –
- Launched
- Apr 2019
Apache-2.0updated today
Semgrep
semgrep/semgrep
Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
- Stars
- 17,157
- Launched
- Dec 13, 2019
- License
- LGPL-2.1
- Language
- C
- Release, today
- v1.182.0
- Activity
- updated today
- static-analysis
- static-code-analysis
- java
- go
- sast
- semgrep
- r2c
- c
What Semgrep buries
Other ways to bury Snyk
Find secrets with Gitleaks
- Stars
- 30.2k
- Growth
- –
- Launched
- Jan 2018
MITupdated 21d ago
Find, verify, and analyze leaked credentials
- Stars
- 28.6k
- Growth
- –
- Launched
- Dec 2016
AGPL-3.0updated today
A vulnerability scanner for container images and filesystems
- Stars
- 13.1k
- Growth
- –
- Launched
- May 2020
Apache-2.0updated 1d ago
Vulnerability scanner written in Go which uses the data provided by https://osv.dev
- Stars
- 11.2k
- Growth
- –
- Launched
- Nov 2022
Apache-2.0updated today
CLI tool and library for generating a Software Bill of Materials from container images and filesystems
- Stars
- 9.7k
- Growth
- –
- Launched
- May 2020
Apache-2.0updated 1d ago