semgrep

semgrep/semgrep

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

7 good first / help-wanted issues · OCaml · last activity Aug 25, 2026

16.4K stars 1.0K forks 16.4K watchers OCaml GNU Lesser General Public License v2.1
c go java javascript python r2c ruby sast semgrep static-analysis static-code-analysis typescript
7 Open Issues Need Help Last updated: Aug 25, 2026

Open Issues Need Help

View All on GitHub
bug good first issue priority:low cli
semgrep/semgrep
16.4K

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

OCaml
#c#go#java#javascript#python#r2c#ruby#sast#semgrep#static-analysis#static-code-analysis#typescript
semgrep/semgrep
16.4K

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

OCaml
#c#go#java#javascript#python#r2c#ruby#sast#semgrep#static-analysis#static-code-analysis#typescript
bug documentation good first issue
semgrep/semgrep
16.4K

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

OCaml
#c#go#java#javascript#python#r2c#ruby#sast#semgrep#static-analysis#static-code-analysis#typescript
good first issue priority:low lang:rust
semgrep/semgrep
16.4K

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

OCaml
#c#go#java#javascript#python#r2c#ruby#sast#semgrep#static-analysis#static-code-analysis#typescript
bug good first issue priority:low feature:taint
semgrep/semgrep
16.4K

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

OCaml
#c#go#java#javascript#python#r2c#ruby#sast#semgrep#static-analysis#static-code-analysis#typescript
semgrep/semgrep
16.4K

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

OCaml
#c#go#java#javascript#python#r2c#ruby#sast#semgrep#static-analysis#static-code-analysis#typescript
good first issue lang:kotlin parsing
semgrep/semgrep
16.4K

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

OCaml
#c#go#java#javascript#python#r2c#ruby#sast#semgrep#static-analysis#static-code-analysis#typescript