#owasp

nodejsscan

Ajin Abraham

Rules from the preeminent Node.js security scanner, NodeJSScan.

bandit

Use Semgrep as a universal linter to identify vulnerabilities in your code base with the bandit (https://github.com/PyCQA/bandit) rule pack.

findsecbugs

Use Semgrep as a universal linter to identify vulnerabilities and code smells in your code base with the FindSecBugs (https://find-sec-bugs.github.io/) rule pack.

r2c-owasp-presentation

Grayson Hardaway

Ruleset accompanying Semgrep OWASP presentation.

Drew Dennison

Rules for OWASP security checks for python

github-actions

Grayson Hardaway

Security rules for GitHub Actions workflow files

Use Semgrep as a universal linter to identify vulnerabilities in your code base with the bandit (https://github.com/PyCQA/bandit) rule pack.

A ruleset of javascript and typescript rules made for OWASP Juice Shop.

Colleen Dai

OWASP Java Benchmark ruleset, a subset of java rules for faster results.

Grayson Hardaway

Ruleset for OWASP SF

The OWASP Top 10 is an industry-recognized report of top web application security risks. Use this ruleset to scan for OWASP Top 10 vulnerabilities.

Grayson Hardaway

Python Meetup Check Ruleset