semgrep

semgrep 1.172.0

Lightweight static analysis for many languages - cli

<rendered-html><p>Semgrep is a fast, open-source, static analysis tool for finding bugs and enforcing code standards at editor, commit, and CI time. Semgrep analyzes code locally on your computer or in your build environment: code is never uploaded. Its rules look like the code you already write; no abstract syntax trees, regex wrestling, or painful DSLs.</p> </rendered-html>

https://semgrep.dev/
GNU Lesser General Public License v2.1 or later
programs: semgrep, pysemgrep
Platforms (3)
aarch64-darwinaarch64-linuxx86_64-linux
View source on NixOS/nixpkgs →

Install

Copy into your configuration

NixOS (configuration.nix)
environment.systemPackages = with pkgs; [
  semgrep
];
Ad-hoc shell
nix-shell -p semgrep
Flake (nix run)
nix run nixpkgs#semgrep