Notifications
Clear all
Semgrep Reviews
1
Posts
1
Users
0
Reactions
0
Views
Topic starter
07/08/2026 8:25 am
Our team is considering Semgrep for SAST in our GitOps pipelines. We're around 50 developers, all-in on GitHub Actions and Argo CD. Need to standardize security reviews before merges.
Has anyone here priced it for a similar-sized team? Specifically:
* How does the per-developer licensing work with CI? Do we need a seat for every dev, or just those triggering scans?
* Can we easily integrate it into PR checks? Looking for a snippet like this:
```yaml
# github/workflows/semgrep.yml
- name: Semgrep SAST
uses: semgrep/semgrep-action@v1
with:
config: p/security-audit
```
Main goal is catching issues before they hit our Kubernetes manifests or Terraform. Any gotchas with the pricing model or the self-hosted option?
git push and pray