#semgrep

TL;DR. golang.org/x/net/idna.Lookup.ToASCII runs UTS-46 NFKC mapping on hostnames, which folds 100...

We’ve rounded up some news and updates from the Semgrep ecosystem to help ship features, not...

I've rounded up some news and updates about Semgrep to make it easier to ship features, not...

This is another installment of the top ten things happening at Semgrep recently that I think you will...

Engineering teams want to satisfy security teams. Security teams want to be seen as value-added and...

Using generative artificial intelligence is a boon for the experimental nature that comes from...

Securing software is difficult and not always top of mind when developing an application. A security...

Semgrep is an open-source static code analysis tool for finding bugs and security vulnerabilities....

Semgrep provides a large number of rules, but sometimes you may want to customize a rule or create a...