compare
MegaLinter vs Semgrep
The same facts for both, read from GitHub every night, and the relation a person reviewed.
| Fact | MegaLinter | Semgrep |
|---|---|---|
| Language | Dockerfile | C |
| Licence | AGPL-3.0 | LGPL-2.1 |
| Stars | 2.6k | 17k |
| Latest | v10.1.0 | v1.179.0 |
| Last push | 2026-10-06 | 2026-10-06 |
| Release cadence | about 42 days between releases | about 9 days between releases |
| Active contributors | 15+ commit authors on the default branch in the last 90 days | 26 commit authors on the default branch in the last 90 days |
| Flags | none | none |
How they relate
Both replace SonarQube Cloud. Alternatives to SonarQube Cloud →
PartialMegaLinterRuns many linters and analyzers in CI and reports on pull requests, with no server keeping history.
PartialSemgrepRule-based scans of many languages from the CLI or in CI, with no server keeping findings across branches.
MegaLinter
MegaLinter
unsigned The latest release, v10.1.0, carries no signature GitHub could verify.
Loading the security report
Semgrep
unsigned The latest release, v1.179.0, carries no signature GitHub could verify.
Loading the security report