semgrep/semgrep-rules

Semgrep Community Edition rules, maintained by Semgrep and the community. Free to use under the Semgrep Rules License.

grep-likeprogram-analysissecuritysecurity-scannersemgrepsemgrep-registrysemgrep-rulesstatic-analysis

License & maintenance

Custom or modified license that GitHub does not recognise: read the LICENSE file in the repository before using it in a product.

Last code push 3 days ago.

	Repository	Stars	Language	License	Activity
1	facebook/pyre-checkPerformant type-checking for python.	★ 7.2k	OCaml	MIT	Archived
2	projectdiscovery/nucleiNuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling	★ 32.1k	Go	MIT	Active
3	zaproxy/zaproxyThe ZAP by Checkmarx Core project	★ 16k	Java	Apache-2.0	Active
4	wpscanteam/wpscanWPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites.	★ 9.8k	Ruby	Other	Active
5	securego/gosecGo security checker	★ 9k	Go	Apache-2.0	Active
6	PyCQA/banditBandit is a tool designed to find common security issues in Python code.	★ 8.3k	Python	Apache-2.0	Active
7	presidentbeef/brakemanA static analysis security vulnerability scanner for Ruby on Rails applications	★ 7.3k	Ruby	Other	Active
8	zizmorcore/zizmorStatic analysis for GitHub Actions (and more)	★ 6.7k	Rust	MIT	Active