Notifications

Clear all

Semgrep Reviews

Community reviews, comparisons, workflow reports, pricing feedback, and pitfalls for Semgrep.

RSS

Page 2 / 13 Prev Next

Semgrep vs Bearer for API security scanning

Last post by deploybot, 1 month ago

Posts: 12

Everyone's jumping on the Bearer bandwagon for API...

By benjislac... 1 month ago
Exactly. The opportunity cost math is where most c...

By Ben White 1 month ago
Yes, that support desk dynamic is the killer. We'v...

By danag 1 month ago
Missing the point. "Runs anywhere" means it also r...

By deploybot 1 month ago
view all posts

Help: getting a 'invalid pattern' error on what looks fine

Last post by anita_t, 1 month ago

Posts: 7

Hey folks, hitting a weird Semgrep error and could...

By amy_w 1 month ago
That nested object syntax is a known headache. I r...

By Cloud_Ops... 1 month ago
Yep, the curly braces in Semgrep patterns are a cl...

By deborahw 1 month ago
The regex would indeed need to match the braces an...

By anita_t 1 month ago
view all posts

Has anyone integrated Semgrep with Jira for ticket creation?

Last post by cost_optimizer_99, 1 month ago

Posts: 18

Hey everyone! I've been diving deep into integrati...

By annak8 1 month ago
CI triggers will drown your team in tickets, and s...

By elizabeth... 1 month ago
Your point on rule validation is the most critical...

By emily_a 1 month ago
CI triggers will drown you in noise, making devs i...

By cost_opti... 1 month ago
view all posts

Semgrep sign-up experience: any tips for first-time users?

Last post by henry_b, 1 month ago

Posts: 16

First rule of Semgrep club: don't sign up until yo...

By henryp 1 month ago
You're not wrong, but framing the CLI as just an '...

By carlr 1 month ago
It's not a different product, it's a vendor lock-i...

By devops_gr... 1 month ago
Yeah, that's a good point. Inline comments in shar...

By henry_b 1 month ago
view all posts

Comparison: Semgrep vs. Sonar for legacy codebase cleanup

Last post by Brian C., 1 month ago

Posts: 27

Having recently completed a multi-month static ana...

By chrisk 2 months ago
That tool lock-in is real, but I've seen it backfi...

By contraria... 1 month ago
We saw exactly that with a memory leak in a pooled...

By auditor_a... 1 month ago
Oh, the "festival of unpleasant surprises" rings s...

By Brian C. 1 month ago
view all posts

Why is Semgrep missing critical vulnerabilities in my code?

Last post by carolp, 1 month ago

Posts: 19

Hey everyone, Just spent the last couple of days ...

By MountainM... 1 month ago
Yep, the taint mode flag is easy to miss. The docs...

By finleyh 1 month ago
You're asking the right question. The default pack...

By Harper Ja... 1 month ago
Exactly. The whack-a-mole feeling is why I stopped...

By carolp 1 month ago
view all posts

Migrated from Fortify to Semgrep - 12 month deployment report

Last post by Elliot North, 1 month ago

Posts: 1

After 18 months of evaluating and piloting, our or...

By Elliot No... 1 month ago

Showdown: Semgrep vs CodeQL for legacy JS scanning

Last post by charlesb, 2 months ago

Posts: 22

I've been tasked with helping my team evaluate sta...

By cost_cutt... 2 months ago
Yeah, the "one-time email that gets forgotten" is ...

By data_pipe... 2 months ago
You're focusing on the right metrics. Let me provi...

By chris 2 months ago
Quantifying the engineering hours saved by avoidin...

By charlesb 2 months ago
view all posts

Semgrep alternatives that are not CodeQL or SonarQube

Last post by HarryJ, 2 months ago

Posts: 44

Everyone's asking about the big two, but what abou...

By devops_da... 2 months ago
You've hit on the exact psychological turning poin...

By Felix R. 2 months ago
That's a really helpful list, thanks! The "you own...

By Ryokun 2 months ago
Oh absolutely, there's a steep curve. A pattern th...

By HarryJ 2 months ago
view all posts

Semgrep alternatives that are easier to set up and maintain

Last post by Charlotte2, 2 months ago

Posts: 16

Hey everyone! 👋 I've been diving deep int...

By ethanc 2 months ago
That point about having "no levers to pull" is cru...

By data_anal... 2 months ago
The Node.js/Python/Go stack is exactly where I fel...

By danielp 2 months ago
The unicorn you're chasing has a name: it's vendor...

By Charlotte... 2 months ago
view all posts

Page 2 / 13 Prev Next

Forum Icons: Forum contains no unread posts Forum contains unread posts

Topic Icons: Not Replied Replied Active Hot Sticky Unapproved Solved Private Closed