Semgrep

@semgrep

Code security for builders. Catch, flag, and fix real issues before they ship, powered by security that learns as you build.

only on your local machine

Semgrep
@semgrep
Oct 16
Your developers are shipping faster than ever. Your security team is trying to keep up. On Oct 22, Isaac Evans (CEO, Semgrep) joins Viraj Gandhi from ServiceNow and Varun Agaskar from Broadridge Financial for the session “Security at the Speed of Development” at the PBC Agentic
1
Semgrep
@semgrep
Oct 16
They did not break in: they published. That line from the Beagle Brigade team sums up how package registry malware works. A stolen maintainer token becomes a new version of a package you already depend on, and it runs on every laptop and CI runner that installs it, before anyone
1
Semgrep
@semgrep
Oct 15
Repos hosted in Cursor Origin can now connect to Semgrep. Automated scans, PR checks, and findings in the workflow you already use.
Cursor Origin Security Scanning: Semgrep Checks Every PR
From semgrep.dev
Semgrep
@semgrep
Oct 14
Only raise a security issue you can prove. That was the idea behind a hackathon project which took first place in our Semgrep Guardian challenge at the Cyberdefense Hackathon during SF Tech Week. A static deterministic check runs first, so most saves never reach a commit at
Semgrep
@semgrep
Oct 13
PRs grew 3.1×. Reviewers grew 1.5×. Written review feedback fell from 39% to 21% of PRs. Silent approvals nearly doubled. Your developers don't want to review code, and they can't keep up. 🧵
1