The most advanced code security (SAST) engine - fully open-source. No paywall, no login.
Joined January 2024
- Tweets223
- Following24
- Followers221
- Likes107
Opengrep retweeted
npm recently introduced staged publishing, and it directly targets the attack pattern behind most of the supply chain compromises we tracked this year.
Instead of npm publish pushing packages live instantly, npm stage publish puts them in a queue. A human with 2FA has to approve, preventing attackers from pushing malicious package versions with stolen tokens
We open-sourced a SAST rule that catches "npm publish" in your GitHub Actions workflows and flags it for migration.
Opengrep retweeted
Opengrep @opengrep — Open-source code security engine for developers
⭐ Stars: 1,347
🔗 Forks: 85
⏩ Last commit: 2 days ago
⌛ First commit: 6 months ago
openalternative.co/opengrep
Opengrep retweeted
@elixirlang is back in opengrep
if you're an elixir loyalist & looking for free (& advanced) static code analysis engine, opengrep now works for you ⚡️
first off, we restored @elixirlang support 🔥
This was paywalled & removed from SemgrepCE.
We've also shipped some improvements when parsing ellipsis in elixir. More improvements to come.
Opengrep retweeted
If you love semgrep free but miss having fingerprints to track findings (and exception lists), check out @opengrep
Opengrep retweeted
semgrepのfork "opengrep/opengrep: 🔎 Static code analysis engine to find security issues in code." github.com/opengrep/opengrep #Tools #OpenSource
Opengrep retweeted
we weighed requests from community & sponsors, most are aligned: everyone wants an engine that has
- Cross-file analysis
- Inter-file analysis
- More & better language support
- Advanced features
so that's what we're building.
the open roadmap session -> vimeo.com/1062009140
Opengrep retweeted
With Semgrep increasingly focused on the paid version, there is now a dedicated OSS fork called @opengrep
I recommend trying it and voicing feedback!
Hello world. We’re launching Opengrep, a fork of @semgrep CS (formerly SemgrepOSS).
in response to recent changes by Semgrep that affect its open-source nature and shift focus to its paid offering, limiting access and innovation for the broader community.
Opengrep retweeted
.@Opengrep was created with a governance structure to sustain continued and indefinite open source freedom of use that Semgrep no longer offers.
thenewstack.io/opengrep-laun…
Opengrep retweeted
Big launch from the @opengrep team this week! This open source project has a lot of momentum. It is well organized and is establishing itself as a serious, sustainable alternative in the #SAST ecosystem, not just a reactive fork. socket.dev/blog/opengrep-lau…
Opengrep retweeted
🚀 Just published: Opengrep @opengrep — Open-source code security engine for developers
Opengrep is a community-driven fork of SemgrepCS, providing accessible static code analysis and security scanning for developers.
devsuite.co/tools/opengrep
Opengrep retweeted
⭐ Opengrep has just reached 100 stars on GitHub! Huge congrats to the @opengrep team! 🎉
openalternative.co/opengrep
Opengrep retweeted
Happy to be a part of the @opengrep community! Seriously - if you like using Semgrep for SAST then you should take a look at Opengrep.
Hello world. We’re launching Opengrep, a fork of @semgrep CS (formerly SemgrepOSS).
in response to recent changes by Semgrep that affect its open-source nature and shift focus to its paid offering, limiting access and innovation for the broader community.
Opengrep retweeted
have 2 seconds and want to support oss security? give @opengrep an upvote & let us know what you think 🔼🔺☝️
producthunt.com/posts/opengr…
Opengrep retweeted
Excellent!
Hello world. We’re launching Opengrep, a fork of @semgrep CS (formerly SemgrepOSS).
in response to recent changes by Semgrep that affect its open-source nature and shift focus to its paid offering, limiting access and innovation for the broader community.