semgrep
https://github.com/returntocorp/semgrep
OCaml
Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
Triage Issues!
When you volunteer to triage issues, you'll receive an email each day with a link to an open issue that needs help in this project. You'll also receive instructions on how to triage issues.
Triage Docs!
Receive a documented method or class from your favorite GitHub repos in your inbox every day. If you're really pro, receive undocumented methods or classes and supercharge your commit history.
OCaml not yet supported1 Subscribers
Add a CodeTriage badge to semgrep
Help out
- Issues
- fix: use uv for Python setup in make all
- fix: don't derive semgrep-core's stack limit from an unlimited rlimit (Python 3.15)
- fix: run semgrep-core on Eio's posix backend so worker domains don't need io_uring
- semgrep-core crashes on Python 3.15 (Linux): stack limit derived from RLIM_INFINITY / 3
- fix(go): parse Go 1.24 generic aliases and type-set constraints
- fix(cli): exit code comes from the highest-level scan error, not the last one
- Go: generic type alias fails to parse ("= was unexpected") when the ruleset has a for-range pattern
- docs: avoid system pip in install instructions
- fix(cli): label Pro-only operator failures instead of 'Internal matching error'
- bash: a one-line `case ... in x) ... ;; esac` is a syntax error
- Docs
- OCaml not yet supported