semgrep
https://github.com/returntocorp/semgrep
OCaml
Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
Triage Issues!
When you volunteer to triage issues, you'll receive an email each day with a link to an open issue that needs help in this project. You'll also receive instructions on how to triage issues.
Triage Docs!
Receive a documented method or class from your favorite GitHub repos in your inbox every day. If you're really pro, receive undocumented methods or classes and supercharge your commit history.
OCaml not yet supported1 Subscribers
Add a CodeTriage badge to semgrep
Help out
- Issues
- Unpatched CVEs in pinned dependencies mcp and opentelemetry-api block Dependabot downstream
- Gradle modules mapped outside the owning build are discovered as separate builds
- fix: resolve mapped Gradle projects through owning builds
- CE 1.182.1: taint fixpoint timeouts on public MediaPipe WASM loaders still exit 0 with errors empty
- fix(go): match calls inside if initializers
- C#: parser rejects C# 14 null-conditional assignment
- make all still invokes pipenv after the CLI migrated to uv
- Register untyped object-destructured parameters in function scopes
- Update the Python MCP SDK pin to 1.30.0
- Source/build provenance for 1.170.1 ARM64 native core binary
- Docs
- OCaml not yet supported