Semgrep
Fast, customizable static analysis for many languages
Semgrep is an open-source static analysis tool that finds bugs and security issues using lightweight, customizable rules. The CLI engine is open source and runs entirely in self-hosted CI.
Key features
- Pattern-based code search
- 30+ language support
- Custom rule writing
- Security rule registry
Strengths
- Released under the LGPL-2.1 license
- First-class Docker support for quick deployment
- Mature project with 16.1k GitHub stars
- Written in OCaml
Semgrep replaces
Compare Semgrep
11 head-to-head comparisons.
Similar developer tools & git apps
Excalidraw
Developer Tools & GitVirtual hand-drawn style whiteboard
Replaces Miro
lazygit
Developer Tools & GitSimple terminal UI for Git commands
Replaces GitKraken, Sourcetree
Hoppscotch
Developer Tools & GitOpen-source API development ecosystem
Replaces Postman, Insomnia
json-server
Developer Tools & GitFull fake REST API from a JSON file in seconds
Replaces Mockoon, Postman Mock
Strapi
Developer Tools & GitLeading open-source headless CMS
Replaces Contentful
NocoDB
Developer Tools & GitOpen-source Airtable alternative
Replaces Airtable