Repositories list

• semgrep-rules

  Public

  semgrep/semgrep-rules’s past year of commit activity
  Semgrep Community Edition rules, maintained by Semgrep and the community. Free to use under the Semgrep Rules License.

  securitystatic-analysisprogram-analysis+ 5

  securitystatic-analysisprogram-analysissecurity-scannergrep-likesemgrepsemgrep-rulessemgrep-registry

  HCL

  •

  Other

  •521521 forks•1.1k1.1k stars•7474 issues•7777 pull requests•Updated Apr 19, 2026Apr 19, 2026

• e2e

  Public

  semgrep/e2e’s past year of commit activity
  [MISSING DESCRIPTION]

  Shell

  •00 forks•22 stars•00 issues•1.5k1.5k pull requests•Updated Apr 18, 2026Apr 18, 2026

• ocaml-tree-sitter-core

  Public
  OCaml code generator and runtime library for handling typed tree-sitter CSTs

  OCaml

  •

  GNU Lesser General Public License v2.1

  •1111 forks•4747 stars•77 issues•99 pull requests•Updated Apr 17, 2026Apr 17, 2026

• semgrep-docs

  Public

  semgrep/semgrep-docs’s past year of commit activity
  Documentation of Semgrep: a fast, open-source, static analysis tool.

  semgrep

  semgrep

  MDX

  •

  GNU Lesser General Public License v2.1

  •114114 forks•5151 stars•99 issues•1111 pull requests•Updated Apr 17, 2026Apr 17, 2026

• ocaml-cohttp

  Public
  An OCaml library for HTTP clients and servers using Lwt or Async

  OCaml

  •

  Other

  •183183 forks•00 stars•00 issues•00 pull requests•Updated Apr 17, 2026Apr 17, 2026

• semgrep

  Public

  semgrep/semgrep’s past year of commit activity
  Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

  javascriptrubypython+ 9

  javascriptrubypythoncjavagotypescriptstatic-code-analysisstatic-analysissast+ 2

  OCaml

  •

  GNU Lesser General Public License v2.1

  •913913 forks•15k15k stars•841841 issues•1818 pull requests•Updated Apr 17, 2026Apr 17, 2026

• semgrep-network-broker

  Public

  semgrep/semgrep-network-broker’s past year of commit activity
  Facilitates network access between Semgrep and on-prem resources

  Go

  •

  MIT License

  •55 forks•99 stars•00 issues•55 pull requests•Updated Apr 17, 2026Apr 17, 2026

• mythos-bench

  Public
  Jagged Frontier: LLM vulnerability detection benchmark harnesses (API + Claude Code agentic)

  Python

  •00 forks•44 stars•00 issues•00 pull requests•Updated Apr 17, 2026Apr 17, 2026

• semgrep-interfaces

  Public

  semgrep/semgrep-interfaces’s past year of commit activity
  Store the ATD/openapi/protobuf/... interfaces between semgrep components

  Python

  •

  GNU Lesser General Public License v2.1

  •1414 forks•1818 stars•11 issue•11 pull request•Updated Apr 16, 2026Apr 16, 2026

• setup-ocaml

  Public
  GitHub Action for the OCaml programming language (Semgrep Fork)

  TypeScript

  •

  MIT License

  •4747 forks•00 stars•00 issues•88 pull requests•Updated Apr 15, 2026Apr 15, 2026

• ocaml

  Public
  The core OCaml system: compilers, runtime system, base libraries

  OCaml

  •

  Other

  •1.2k1.2k forks•00 stars•00 issues•11 pull request•Updated Apr 15, 2026Apr 15, 2026

• ocaml-tree-sitter-semgrep

  Public
  Generate parsers from tree-sitter grammars extended to support Semgrep patterns

  Move

  •

  GNU General Public License v3.0

  •2020 forks•1212 stars•1010 issues•88 pull requests•Updated Apr 15, 2026Apr 15, 2026

• semgrep-scala

  Public
  generated scala parser for semgrep

  no-archive-2026

  no-archive-2026

  C

  •00 forks•00 stars•00 issues•00 pull requests•Updated Apr 14, 2026Apr 14, 2026

• homebrew-core

  Public

  semgrep/homebrew-core’s past year of commit activity
  🍻 Default formulae for the missing package manager for macOS (or Linux)

  Ruby

  •

  BSD 2-Clause "Simplified" License

  •13k13k forks•00 stars•00 issues•00 pull requests•Updated Apr 13, 2026Apr 13, 2026

• skills

  Public

  semgrep/skills’s past year of commit activity
  A collection of skills for AI coding agents from Semgrep

  securityskillsagents+ 1

  securityskillsagentsclaude-code

  JavaScript

  •

  Other

  •2525 forks•188188 stars•00 issues•33 pull requests•Updated Apr 13, 2026Apr 13, 2026

• semgrep-vscode

  Public
  Semgrep extension for Visual Studio Code

  vscodevisual-studio-codevscode-extension+ 1

  vscodevisual-studio-codevscode-extensionsemgrep

  TypeScript

  •

  GNU Lesser General Public License v2.1

  •2828 forks•7676 stars•1414 issues•44 pull requests•Updated Apr 10, 2026Apr 10, 2026

• mcp-marketplace

  Public

  semgrep/mcp-marketplace’s past year of commit activity
  Home for the Semgrep Claude Code Plugin.

  Shell

  •33 forks•33 stars•44 issues•22 pull requests•Updated Apr 10, 2026Apr 10, 2026

• pre-commit

  Public

  semgrep/pre-commit’s past year of commit activity
  Pre-commit hooks to run Semgrep

  Shell

  •

  GNU Lesser General Public License v2.1

  •44 forks•66 stars•33 issues•55 pull requests•Updated Apr 10, 2026Apr 10, 2026

• semgrep-intellij

  Public

  semgrep/semgrep-intellij’s past year of commit activity
  Kotlin

  •

  GNU Lesser General Public License v2.1

  •44 forks•77 stars•22 issues•1717 pull requests•Updated Apr 9, 2026Apr 9, 2026

• semgrep-benchmark-lichess-lila

  Public
  ♞ lichess.org: the forever free, adless and open source chess server ♞

  Scala

  •

  GNU Affero General Public License v3.0

  •00 forks•00 stars•00 issues•33 pull requests•Updated Apr 9, 2026Apr 9, 2026

• cve-2026-22732-demo

  Public
  Minimal reproduction of CVE-2026-22732 — Spring Security HTTP headers silently dropped

  Java

  •00 forks•00 stars•00 issues•00 pull requests•Updated Apr 7, 2026Apr 7, 2026

• cursor-plugin

  Public
  Home for the Semgrep Cursor Plugin.

  00 forks•00 stars•00 issues•00 pull requests•Updated Apr 7, 2026Apr 7, 2026

• semgrep-ocaml-visitors

  Public

  semgrep/semgrep-ocaml-visitors’s past year of commit activity
  A implementation of OCaml's `visitors`

  OCaml

  •00 forks•00 stars•00 issues•00 pull requests•Updated Apr 3, 2026Apr 3, 2026

• obackward

  Public
  C++

  •00 forks•00 stars•00 issues•11 pull request•Updated Apr 3, 2026Apr 3, 2026

• semgrep-verify-fix

  Public

  semgrep/semgrep-verify-fix’s past year of commit activity
  semgrep-verify-fix (sgvf) is a CLI tool that confirms a security finding present on the default branch has been resolved in a local working copy or branch.

  Python

  •

  MIT License

  •00 forks•00 stars•00 issues•00 pull requests•Updated Apr 3, 2026Apr 3, 2026

• highlife

  Public

  semgrep/highlife’s past year of commit activity
  The champagne of homebrew tools

  Go

  •

  Apache License 2.0

  •00 forks•00 stars•00 issues•00 pull requests•Updated Mar 30, 2026Mar 30, 2026

• ai-best-practices

  Public
  Semgrep Pro Rules to ensure code using LLMs is following best practices

  Other

  •66 forks•6868 stars•00 issues•00 pull requests•Updated Mar 25, 2026Mar 25, 2026

• tree-sitter-fga

  Public

  semgrep/tree-sitter-fga’s past year of commit activity
  Tree sitter grammar for OpenFGA authorization schema language (fga).

  JavaScript

  •

  MIT License

  •33 forks•00 stars•00 issues•44 pull requests•Updated Mar 21, 2026Mar 21, 2026

• pyro-caml

  Public
  A statistical continuous profiler for OCaml compatible with Pyroscope

  OCaml

  •00 forks•88 stars•11 issue•33 pull requests•Updated Mar 21, 2026Mar 21, 2026

• semgrep-rust

  Public
  generated rust parser for semgrep

  C

  •33 forks•33 stars•00 issues•00 pull requests•Updated Mar 20, 2026Mar 20, 2026