semgrep
https://github.com/returntocorp/semgrep
OCaml
Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
Triage Issues!
When you volunteer to triage issues, you'll receive an email each day with a link to an open issue that needs help in this project. You'll also receive instructions on how to triage issues.
Triage Docs!
Receive a documented method or class from your favorite GitHub repos in your inbox every day. If you're really pro, receive undocumented methods or classes and supercharge your commit history.
OCaml not yet supported1 Subscribers
Add a CodeTriage badge to semgrep
Help out
- Issues
- `--error` exit code reflects only the last structured error
- OSS Java grammar fails to parse qualified (dotted) record-pattern labels in switch (`case Outer.Inner(var x) ->`)
- fix: preserve positions when fusing string literals
- fix: match *.Dockerfile and *.Containerfile extensions in File_type
- feat(cli): expose custom semgrepignore file option
- Add CLI flag to specify custom .semgrepignore file path
- Python: raw f-string with backslash + PEP 695 generic in same file causes false "Syntax error" and silently drops file from scan
- fix(cli): clarify gitignore scan summaries
- Avoid binding metavariables to synthetic Lua table keys
- fix: match language extensions case-insensitively
- Docs
- OCaml not yet supported