| 1. | | Broccoli2Shell: The One Decoder We All Depend On (semgrep.dev) |
| 1 point by j12y 8 days ago | past | 2 comments |
|
| 2. | | It's Time to Rename Cybersecurity Awareness Month (semgrep.dev) |
| 1 point by mooreds 33 days ago | past |
|
| 3. | | Why It's Time to Rename Cybersecurity Awareness Month (semgrep.dev) |
| 2 points by Garbage 33 days ago | past |
|
| 4. | | SHA pinning GitHub Actions across an organization (semgrep.dev) |
| 8 points by mdean 83 days ago | past | 2 comments |
|
| 5. | | You Can't Reverse Engineer Your Way Out of the AI Supply Chain Problem (semgrep.dev) |
| 4 points by antondd 3 months ago | past |
|
| 6. | | GPT-5.6 Luna Showed a Better ROI on Cybersecurity Benchmark (semgrep.dev) |
| 4 points by j12y 3 months ago | past |
|
| 7. | | GLM 5.2 beats Claude in our benchmarks (semgrep.dev) |
| 1113 points by jms703 4 months ago | past | 516 comments |
|
| 8. | | Semgrep Guardian: Security for AI-Generated Code (semgrep.dev) |
| 4 points by ajbt200128 4 months ago | past | 1 comment |
|
| 9. | | Making Semgrep rip: How Ripgrep inspired us to shave hours off (some) scans (semgrep.dev) |
| 7 points by bkettle 4 months ago | past |
|
| 10. | | We Cut Semgrep's Taint Analysis Time by 75% (semgrep.dev) |
| 3 points by ajbt200128 4 months ago | past |
|
| 11. | | Pyro Caml Continuous Profiler for OCaml (semgrep.dev) |
| 26 points by j12y 5 months ago | past |
|
| 12. | | Mini Shai-Hulud in Intercom Package Spreads to Packagist Using Composer Plugin (semgrep.dev) |
| 4 points by j12y 6 months ago | past |
|
| 13. | | Shai-Hulud Themed Malware Found in the PyTorch Lightning AI Training Library (semgrep.dev) |
| 465 points by j12y 6 months ago | past | 177 comments |
|
| 14. | | New Sandbox Escape Affecting Popular Node.js Sandbox Library Vm2 (semgrep.dev) |
| 5 points by j12y 9 months ago | past |
|
| 15. | | Security Engineers – a MCP audit checklist for you (semgrep.dev) |
| 7 points by kaboberg on Oct 1, 2025 | past | 1 comment |
|
| 16. | | Finding vulnerabilities in Python web apps using Claude Code and OpenAI Codex (semgrep.dev) |
| 13 points by neuroo on Sept 2, 2025 | past |
|
| 17. | | Nx compromised: malware uses Claude code CLI to explore the filesystem (semgrep.dev) |
| 493 points by neuroo on Aug 27, 2025 | past | 39 comments |
|
| 18. | | Making zero false positive SAST a reality (semgrep.dev) |
| 4 points by wslh on June 25, 2025 | past |
|
| 19. | | Show HN: Replit and Semgrep – Real-time security scanning in the browser (semgrep.dev) |
| 2 points by ebuchanan on May 15, 2025 | past |
|
| 20. | | Semgrep Assistant: Your AI Appsec Engineer (semgrep.dev) |
| 2 points by wslh on April 24, 2025 | past |
|
| 21. | | Free Course on Security Headers, for Developers (semgrep.dev) |
| 12 points by shehackspurple on April 24, 2025 | past | 3 comments |
|
| 22. | | Popular GitHub Action tj-actions/changed-files is compromised (semgrep.dev) |
| 282 points by moyer on March 15, 2025 | past | 4 comments |
|
| 23. | | Upgrading Semgrep from OCaml 4 to OCaml 5 (semgrep.dev) |
| 7 points by ajbt200128 on March 12, 2025 | past |
|
| 24. | | Show HN: Semgrep Assistant, a set of surgical AI tools for AppSec (semgrep.dev) |
| 8 points by underyx on Jan 22, 2025 | past | 4 comments |
|
| 25. | | Semgrep Updates OSS Licensing (semgrep.dev) |
| 2 points by rohansood15 on Jan 15, 2025 | past |
|
| 26. | | The tech behind Semgrep Assistant's triage and remediation guidance (semgrep.dev) |
| 4 points by pabloest on Aug 22, 2024 | past |
|
| 27. | | Lsp.js: Using WASM and JavaScript to Support OCaml on Windows (semgrep.dev) |
| 12 points by ajbt200128 on May 2, 2024 | past | 1 comment |
|
| 28. | | Semgrep – Find bugs and enforce code standards (semgrep.dev) |
| 3 points by s4i on April 9, 2024 | past |
|
| 29. | | Three key learnings for AppSec teams from the XZ backdoor (semgrep.dev) |
| 2 points by rrampage on April 8, 2024 | past |
|
| 30. | | Securing CodeQL queries using Semgrep (semgrep.dev) |
| 11 points by brandonspark on April 1, 2024 | past | 2 comments |
|
|
| More |
