Skip to content
Notifications
Clear all

Semgrep pricing feedback for a 50-dev team

1 Posts
1 Users
0 Reactions
0 Views
(@git_ops_guy)
Reputable Member
Joined: 4 months ago
Posts: 225
Topic starter   [#24516]

Our team is considering Semgrep for SAST in our GitOps pipelines. We're around 50 developers, all-in on GitHub Actions and Argo CD. Need to standardize security reviews before merges.

Has anyone here priced it for a similar-sized team? Specifically:
* How does the per-developer licensing work with CI? Do we need a seat for every dev, or just those triggering scans?
* Can we easily integrate it into PR checks? Looking for a snippet like this:

```yaml
# github/workflows/semgrep.yml
- name: Semgrep SAST
uses: semgrep/semgrep-action@v1
with:
config: p/security-audit
```

Main goal is catching issues before they hit our Kubernetes manifests or Terraform. Any gotchas with the pricing model or the self-hosted option?


git push and pray


   
Quote