Original Post: Semgrep App's Fall 2021 updates Semgrep App has undergone a major redesign, introducing a drag-and-drop UI for easier configuration of rules and notifications. Useful new features include a finding triage flow and Jira… Read More »Highlights from Semgrep App’s Exciting Fall 2021 Updates
Original Post: Semgrep's Fall 2021 Updates Semgrep has introduced several significant updates, which include: Taint-Sanitizer-Sink Rules: This feature enables smarter, data-flow-based security scanning, enhancing the ability to prevent issues like SQL injection or XSS. The… Read More »Exciting Enhancements: Semgrep’s Fall 2021 Update Highlights
Original Post: Taint mode is now in beta Semgrep’s Taint mode has moved to General Availability (GA), facilitating easier writing of rules to detect injection vulnerabilities through taint analysis—a data-flow analysis technique. Initially, Semgrep aimed… Read More »Exciting Update: Taint Mode Enters Beta Phase for Enhanced Security
Original Post: Announcing general availability of C# Great news for C# enthusiasts! C# support is now officially available in Semgrep, with a parse rate exceeding 99.9% and over 20 C# rules in the registry. This… Read More »C# Officially Launched: Now Generally Available for Developers
Original Post: Semgrep: a static analysis journey Summary: Introduction: Semgrep, a fast, lightweight static analysis tool for finding bugs and enforcing code standards, supports over 17 languages and originated as Spatch (Coccinelle) for C. Initially… Read More »Exploring Semgrep: Insights from a Static Analysis Adventure
Original Post: Building a Full-Stack Web Application with React and Laravel (SAST and DAST tests with Eslint… | by Catelle Ningha | Jul, 2024 The project involved developing a full-stack web application using React for… Read More »Mastering Full-Stack Development with React and Laravel: Incorporating SAST, DAST, and Eslint for Robust Security
Original Post: New, high-signal rules for the JavaScript ecosystem The Semgrep registry has introduced three new rulesets specifically for the JavaScript ecosystem: p/javascript: Enhanced to cover a broader range of targets including both client-side and… Read More »Unlocking Clarity: Essential Rules to Elevate the JavaScript Ecosystem
Original Post: Application Web Full-Stack avec React et Laravel (tests SAST et DAST avec Eslint, PHPStan et OWASP… | by Catelle Ningha | Jul, 2024 The content describes a project where a full-stack web application… Read More »Comprehensive Guide: Building a Full-Stack Web Application with React and Laravel, Including SAST/DAST Testing with Eslint, PHPStan, and OWASP
Original Post: Scanning Shell Scripts With Semgrep Semgrep has introduced experimental support for Bash scripting to help catch common shell syntax errors and unsafe command usages. Highlights include: Detecting Forbidden Commands: Options to flag the… Read More »Enhancing Shell Script Security with Semgrep: A Simple Guide
Original Post: Git Gone Wrong: Application Compromise via Exposed .git Directory | by Cyber Sekler | Jul, 2024 The blog post discusses an experience during a penetration test where an exposed .git directory was discovered… Read More »How Exposed .git Directories Can Put Your Application at Risk: Lessons from Cyber Sekler