Semgrep Custom Rule Runner
Executes Semgrep OSS with custom YAML rule files for project-specific static analysis patterns. Supports semgrep --config and --pattern flags with metavariable constraints for detecting anti-patterns in Python, JavaScript, Go, and Java codebases.
Installation
Use the upstream install or setup path that matches your environment:
- $ brew install semgrep
- $ docker run -it -v "${PWD}:/src" semgrep/semgrep semgrep login
- $ docker run -e SEMGREP_APP_TOKEN= --rm -v "${PWD}:/src" semgrep/semgrep semgrep ci
- $ brew upgrade semgrep
Requirements and caveats from upstream:
Basic usage or getting-started notes:
Semgrep is a fast, open-source, static analysis tool that searches code, finds bugs, and enforces secure guardrails and coding standards. Semgrep supports 30+ languages and can run in an IDE, as a...
Extracted from upstream docs: https://raw.githubusercontent.com/semgrep/semgrep/HEAD/README.md