Semgrep

Static analysis for security bugs

Machines scan your code with Semgrep for security vulnerabilities and risky patterns, and explain how to fix what they find.

Already on WeMachines? Plugins → Semgrep.

  • Scan the payments service for SQL injection risks
  • Check this pull request for security issues before we merge
  • Write a Semgrep rule that flags eval calls in our JavaScript

How it works

Click Connect and sign in to Semgrep. By default, each person connects their own account. Machines use the access of the person asking.

Developer
Semgrep
Category
Security
How it connects
Log in with Semgrep
Machines can
Read, and change what an admin allows
Website
semgrep.dev