1. | | 98% of PyMySQL forks are vulnerable to SQL Injection (cramhacks.com) |
|
1 point by ievans 5 months ago | past
|
2. | | Semgrep: Semantic Grep for Code (github.com/semgrep) |
|
2 points by ievans 9 months ago | past
|
3. | | Semgrep Secrets (semgrep.dev) |
|
3 points by ievans on Oct 24, 2023 | past
|
4. | | The Evolution of Open Source Business Models (tomtunguz.com) |
|
3 points by ievans on Sept 5, 2023 | past
|
5. | | White House RFI on Open-Source Software Security and Memory Safe Languages (whitehouse.gov) |
|
17 points by ievans on Aug 10, 2023 | past | 2 comments
|
6. | | Guardrails for PromQL Using Semgrep (semgrep.dev) |
|
14 points by ievans on Aug 8, 2023 | past
|
7. | | New Fellowship: How Sequoia Is Supporting Open Source (sequoiacap.com) |
|
4 points by ievans on June 9, 2023 | past
|
8. | | Crosscompiling OCaml to JavaScript and WASM to Make Semgrep Playground Fast (semgrep.dev) |
|
5 points by ievans on June 9, 2023 | past
|
9. | | Critical vulnerability in Node vm2 Error.prepareStackTrace (CVE-2023-29017) (nist.gov) |
|
2 points by ievans on April 7, 2023 | past
|
10. | | Semgrep Code: SAST designed and built for engineers (semgrep.dev) |
|
2 points by ievans on Feb 14, 2023 | past
|
11. | | Need for speed: static analysis version (semgrep.dev) |
|
2 points by ievans on Jan 13, 2023 | past
|
12. | | Trojanized Windows 10 Operating System Installers Targeted Ukrainian Government (mandiant.com) |
|
3 points by ievans on Dec 17, 2022 | past | 1 comment
|
13. | | Diplomacy and Meta AI’s Cicero (facebook.com) |
|
1 point by ievans on Nov 29, 2022 | past
|
14. | | Ignore 98% of dependency alerts: introducing Semgrep Supply Chain (r2c.dev) |
|
176 points by ievans on Oct 4, 2022 | past | 59 comments
|
15. | | JavaScript static analysis comparison: ESLint vs. Semgrep (r2c.dev) |
|
1 point by ievans on Jan 28, 2022 | past
|
16. | | Sanitize your inputs? I think not (kevinsmith.io) |
|
2 points by ievans on Oct 22, 2021 | past
|
17. | | Protect Your GitHub Actions with Semgrep (r2c.dev) |
|
4 points by ievans on Oct 5, 2021 | past
|
18. | | Semgrep rules registry: 1,100+ linter rules (github.com/returntocorp) |
|
6 points by ievans on Aug 23, 2021 | past
|
19. | | A Practical Introduction to Semgrep (bernardoamc.com) |
|
1 point by ievans on Aug 6, 2021 | past
|
20. | | Lightstep Is Joining ServiceNow (lightstep.com) |
|
1 point by ievans on May 11, 2021 | past
|
21. | | Semgrep: Semantic grep for code (semgrep.dev) |
|
415 points by ievans on April 22, 2021 | past | 104 comments
|
22. | | Preventing heartbleed bugs with safe programming languages (bluishcoder.co.nz) |
|
2 points by ievans on Feb 3, 2021 | past
|
23. | | Custom Static Analysis Rules Showdown: Brakeman vs. Semgrep (includesecurity.com) |
|
3 points by ievans on Jan 20, 2021 | past
|
24. | | Continuous compliance with lightweight verification tools [pdf] (washington.edu) |
|
3 points by ievans on Oct 6, 2020 | past
|
25. | | Not all attacks are equal: understanding and preventing DoS in web applications (r2c.dev) |
|
46 points by ievans on Sept 11, 2020 | past | 13 comments
|
26. | | Type-Awareness in Semantic Grep (r2c.dev) |
|
3 points by ievans on Aug 5, 2020 | past
|
27. | | Tree-sitter: a parser generator tool and an incremental parsing library (tree-sitter.github.io) |
|
3 points by ievans on July 15, 2020 | past
|
28. | | Coccigrep, a semantic grep for the C language (github.com/regit) |
|
1 point by ievans on June 15, 2020 | past
|
29. | | ScrAPIr: Making Web Data APIs Accessible to Everyone (mit.edu) |
|
2 points by ievans on May 22, 2020 | past | 1 comment
|
30. | | Fortify Source: A Deeper Dive into Function Hardening on Linux and OS X (cyber-itl.org) |
|
4 points by ievans on Aug 20, 2019 | past
|
|
|
More |