semgrep

• Github
• Docs
  • Getting started
• Interactive tutorial
• Megalinter integrtion
• Semgrep registry

Install

pamac install semgrep-bin

Usage

semgrep scan --error -c semgrep.yaml

Issues

• Semgrep doesn't support asserting if files (don't) exist: Add support for semgrep rules that check for specific file path names
  • Suggested solution: Use tools like ls-lint or repolinter