Opengrep (@opengrep) header
Opengrep (@opengrep) profile picture

The most advanced code security (SAST) engine - fully open-source. No paywall, no login.

Joined January 2024
Photo by Opengrep (@opengrep)Photo by Opengrep (@opengrep)Photo by Opengrep (@opengrep)Photo by Opengrep (@opengrep)Photo by Opengrep (@opengrep)Photo by Opengrep (@opengrep)Photo by Opengrep (@opengrep)Photo by Opengrep (@opengrep)Photo by Opengrep (@opengrep)Photo by Opengrep (@opengrep)
We ship every week. Follow along the public roadmap /opengrep/issues What's shipped so far: ✅ windows compatibility (beta) ✅ fingerprints & metavariables restored (SARIF & JSON) ✅ desktop app for rule crafting ⏭️ elixir support ⏭️ cross-file analysis ⌛️inter-file...
Are people still talking about opengrep? I thought that was a silly mistake we laughed at as an industry and went back to Semgrep, no?
4
9
994
Opengrep v1.31.0 is out 🔥
1
1
5
92
• Updated to OCaml 5.5.1 and 𝚟𝚒𝚜𝚒𝚝𝚘𝚛𝚜 from the Opengrep fork to address performance issues • Fixed Python CLI output to device and named pipe destinations, including -𝚘 /𝚍𝚎𝚟/𝚗𝚞𝚕𝚕
1
1
55
Two new Opengrep releases are out: v1.30.1 and v1.30.2.
1
1
4
62
Highlights: • Better taint tracking in Ruby and Crystal • Better taint tracking for pattern matches and unpacking, including Python cases • Better PHP support, with a fix for classes with multiple modifiers • Fix for a performance regression in --𝚝𝚊𝚒𝚗𝚝-𝚒𝚗𝚝𝚛𝚊𝚏𝚒𝚕𝚎
1
26
Opengrep v1.30.0 is out. 👀
1
1
183
• As a move towards Opengrep 2.0, 𝚌𝚒 mode is now supported in --𝚎𝚡𝚙𝚎𝚛𝚒𝚖𝚎𝚗𝚝𝚊𝚕 mode, run as 𝚘𝚙𝚎𝚗𝚐𝚛𝚎𝚙 𝚌𝚒 --𝚎𝚡𝚙𝚎𝚛𝚒𝚖𝚎𝚗𝚝𝚊𝚕, with safer GitLab token handling and better GitHub merge base fetching • Fixes to taint propagators
1
36
Full changelog: github.com/opengrep/opengrep… ship every week.
13
🧡 Two Opengrep releases to catch up on: v1.28.0 and v1.29.0.
1
4
89
v1.29.0 includes: • A bug fix for Kotlin, which previously could suffer from very slow taint analysis in some cases involving lambdas • Engine improvements, resulting in 1 less DLL on Windows
1
25