semgrep/semgrep
14,906 stars · Last commit 2026-04-23
Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
README preview
<br />
<p align="center">
<a href="https://semgrep.dev">
<picture>
<source media="(prefers-color-scheme: light)" srcset="images/semgrep-logo-light.svg">
<source media="(prefers-color-scheme: dark)" srcset="images/semgrep-logo-dark.svg">
<img src="https://raw.githubusercontent.com/semgrep/semgrep/develop/images/semgrep-logo-light.svg" height="100" alt="Semgrep logo"/>
</picture>
</a>
</p>
<h2 align="center">
Code scanning at ludicrous speed.
</h2>
<p align="center">
<a href="https://formulae.brew.sh/formula/semgrep">
<img src="https://img.shields.io/homebrew/v/semgrep?style=flat-square" alt="Homebrew" />
</a>
<a href="https://pypi.org/project/semgrep/">
<img alt="PyPI" src="https://img.shields.io/pypi/v/semgrep?style=flat-square&color=blue">
</a>