Skip to content

@semgrep Semgrep

Change the repository type filter

All

    Repositories list

    145 repositories

    • e2e

      Public
      [MISSING DESCRIPTION]
      Shell
      •0•2•0•1.5k•Updated Apr 25, 2026Apr 25, 2026

    • skills

      Public
      A collection of skills for AI coding agents from Semgrep
      securityskillsagents
      securityskillsagentsclaude-code
      JavaScript
      •
      Other
      •27•193•0•4•Updated Apr 25, 2026Apr 25, 2026

    • semgrep-rules

      Public
      Semgrep Community Edition rules, maintained by Semgrep and the community. Free to use under the Semgrep Rules License.
      securitystatic-analysisprogram-analysis
      securitystatic-analysisprogram-analysissecurity-scannergrep-likesemgrepsemgrep-rulessemgrep-registry
      HCL
      •
      Other
      •521•1.1k•78•77•Updated Apr 25, 2026Apr 25, 2026

    • semgrep-docs

      Public
      Documentation of Semgrep: a fast, open-source, static analysis tool.
      semgrep
      semgrep
      MDX
      •
      GNU Lesser General Public License v2.1
      •115•51•9•9•Updated Apr 24, 2026Apr 24, 2026

    • pyro-caml

      Public
      A statistical continuous profiler for OCaml compatible with Pyroscope
      OCaml
      •0•8•1•3•Updated Apr 24, 2026Apr 24, 2026

    • semgrep

      Public
      Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
      javascriptrubypython
      javascriptrubypythoncjavagotypescriptstatic-code-analysisstatic-analysissast
      OCaml
      •
      GNU Lesser General Public License v2.1
      •920•15k•848•25•Updated Apr 24, 2026Apr 24, 2026

    • semgrep-tsx

      Public
      generated TSX parser for semgrep
      C
      •2•2•0•0•Updated Apr 23, 2026Apr 23, 2026

    • semgrep-typescript

      Public
      generated TypeScript parser for semgrep
      C
      •3•2•0•0•Updated Apr 23, 2026Apr 23, 2026

    • convert-nuget

      Public
      NuGet/dotnet packages.config to packages.lock.json converter
      JavaScript
      •
      MIT License
      •0•1•0•1•Updated Apr 23, 2026Apr 23, 2026

    • semgrep-benchmark-lichess-lila

      Public
      ♞ lichess.org: the forever free, adless and open source chess server ♞
      Scala
      •
      GNU Affero General Public License v3.0
      •0•0•0•3•Updated Apr 23, 2026Apr 23, 2026

    • semgrep-interfaces

      Public
      Store the ATD/openapi/protobuf/... interfaces between semgrep components
      Python
      •
      GNU Lesser General Public License v2.1
      •14•18•1•1•Updated Apr 22, 2026Apr 22, 2026

    • camldn

      Public
      OCaml
      •0•0•0•1•Updated Apr 22, 2026Apr 22, 2026

    • ocaml-tree-sitter-semgrep

      Public
      Generate parsers from tree-sitter grammars extended to support Semgrep patterns
      Move
      •
      GNU General Public License v3.0
      •20•12•10•9•Updated Apr 21, 2026Apr 21, 2026

    • semgrep-network-broker

      Public
      Facilitates network access between Semgrep and on-prem resources
      Go
      •
      MIT License
      •5•10•0•4•Updated Apr 20, 2026Apr 20, 2026

    • ocaml-tree-sitter-core

      Public
      OCaml code generator and runtime library for handling typed tree-sitter CSTs
      OCaml
      •
      GNU Lesser General Public License v2.1
      •11•49•7•9•Updated Apr 17, 2026Apr 17, 2026

    • ocaml-cohttp

      Public
      An OCaml library for HTTP clients and servers using Lwt or Async
      OCaml
      •
      Other
      •182•0•0•0•Updated Apr 17, 2026Apr 17, 2026

    • mythos-bench

      Public
      Jagged Frontier: LLM vulnerability detection benchmark harnesses (API + Claude Code agentic)
      Python
      •1•7•0•0•Updated Apr 17, 2026Apr 17, 2026

    • setup-ocaml

      Public
      GitHub Action for the OCaml programming language (Semgrep Fork)
      TypeScript
      •
      MIT License
      •47•0•0•8•Updated Apr 15, 2026Apr 15, 2026

    • ocaml

      Public
      The core OCaml system: compilers, runtime system, base libraries
      OCaml
      •
      Other
      •1.2k•0•0•1•Updated Apr 15, 2026Apr 15, 2026

    • semgrep-scala

      Public
      generated scala parser for semgrep
      no-archive-2026
      no-archive-2026
      C
      •0•0•0•0•Updated Apr 14, 2026Apr 14, 2026

    • homebrew-core

      Public
      🍻 Default formulae for the missing package manager for macOS (or Linux)
      Ruby
      •
      BSD 2-Clause "Simplified" License
      •14k•0•0•0•Updated Apr 13, 2026Apr 13, 2026

    • semgrep-vscode

      Public
      Semgrep extension for Visual Studio Code
      vscodevisual-studio-codevscode-extension
      vscodevisual-studio-codevscode-extensionsemgrep
      TypeScript
      •
      GNU Lesser General Public License v2.1
      •28•76•14•4•Updated Apr 10, 2026Apr 10, 2026

    • mcp-marketplace

      Public
      Home for the Semgrep Claude Code Plugin.
      Shell
      •3•3•5•2•Updated Apr 10, 2026Apr 10, 2026

    • pre-commit

      Public
      Pre-commit hooks to run Semgrep
      Shell
      •
      GNU Lesser General Public License v2.1
      •4•6•3•5•Updated Apr 10, 2026Apr 10, 2026

    • semgrep-intellij

      Public
      Kotlin
      •
      GNU Lesser General Public License v2.1
      •4•7•2•17•Updated Apr 9, 2026Apr 9, 2026

    • cve-2026-22732-demo

      Public
      Minimal reproduction of CVE-2026-22732 — Spring Security HTTP headers silently dropped
      Java
      •0•0•0•0•Updated Apr 7, 2026Apr 7, 2026

    • cursor-plugin

      Public
      Home for the Semgrep Cursor Plugin.
      0•0•0•0•Updated Apr 7, 2026Apr 7, 2026

    • semgrep-ocaml-visitors

      Public
      A implementation of OCaml's `visitors`
      OCaml
      •0•0•0•0•Updated Apr 3, 2026Apr 3, 2026

    • obackward

      Public
      C++
      •0•0•0•1•Updated Apr 3, 2026Apr 3, 2026

    • semgrep-verify-fix

      Public
      semgrep-verify-fix (sgvf) is a CLI tool that confirms a security finding present on the default branch has been resolved in a local working copy or branch.
      Python
      •
      MIT License
      •0•0•0•0•Updated Apr 3, 2026Apr 3, 2026
    ProTip! When viewing an organization's repositories, you can use the props. filter to filter by custom property.