Semgrep

@semgrep

About Semgrep

Find security and correctness issues with fast semantic code analysis.

#semgrep#security#developer-tool#official#agent-ready

pipx install semgrep

Security inspection

CI-friendly automation

Actionable terminal output

$ bw

Access and manage Bitwarden vault items, organizations, collections, and secrets from scripts.

$ snyk

Scan source code, dependencies, containers, and infrastructure as code for security vulnerabilities.

$ doppler

Fetch and inject Doppler secrets into local commands, applications, and deployment workflows.

$ infisical

Authenticate, inject secrets, export configuration, and scan repositories for leaked credentials.

$ ggshield

Detect exposed secrets in repositories, commits, files, Docker images, and CI pipelines.

$ trivy

Scan containers, filesystems, repositories, Kubernetes, and SBOMs for vulnerabilities and misconfiguration.