Skip to content
35 more Semgrep rules: infrastructure, supply chain, and Ruby
blog.trailofbits.com | blog | #supply-chain | #ruby | #infrastructure-as-code | #github-actions | #static-analysis | #semgrep | #terraform
Summary
Trail of Bits published 35 new Semgrep rules (115 total) covering GitHub Actions OIDC gaps, Terraform/Nomad infrastructure issues, and Ruby flaws, plus a deep dive into regex mode and HCL support.
- Published
- Collected