🔎 Static code analysis engine to find security issues in code.
Fork of the Semgrep engine that runs Semgrep rules unchanged.
alternative to SonarQube Cloud
Semgrep
1 tool replaces Semgrep, 1 of them drop-in
Loading the README
unsigned The latest release, v1.179.0, carries no signature GitHub could verify.
Loading the security report
- SonarQube CloudRule-based scans of many languages from the CLI or in CI, with no server keeping findings across branches.Partial