Resources
semgrep-rules
semgrep/semgrep-rules
Semgrep Rules is the community-maintained collection of Semgrep static analysis rules used to scan code for security and correctness issues.
Topics
Related projects
cwe_checker1.4kcwe_checker is a static analysis suite that scans binary executables for common vulnerability classes such as buffer overflows and null pointer dereferences, built on Ghidra's intermediate representation.
zaproxy16.2kZAP (Zed Attack Proxy) is a widely used open-source web application security scanner. It automatically finds vulnerabilities and supports manual penetration testing, offering a desktop GUI, headless automation and Docker deployment for developers and security testers.
grype13.3kGrype is a vulnerability scanner for container images, filesystems and SBOMs. It covers major OS and language package ecosystems, supports Docker, OCI and Singularity formats, and prioritizes risk with EPSS, KEV and OpenVEX filtering.
wpscan9.9kA WordPress security scanner that enumerates versions, plugins, themes and users while detecting known vulnerabilities.
gosec9kA Go security checker that scans source code via AST, SSA, and taint analysis to detect common vulnerabilities, usable as a CLI or GitHub Action.
bandit8.4kA security linter from PyCQA that inspects Python code via AST and plugins to find common security issues and produce reports.