---
id: 1441
title: "35 more Semgrep rules: infrastructure, supply chain, and Ruby"
source_domain: blog.trailofbits.com
source_url: "https://blog.trailofbits.com/2024/12/09/35-more-semgrep-rules-infrastructure-supply-chain-and-ruby/"
published_at: "2024-12-09 14:00"
tags: ["supply-chain", "ruby", "infrastructure-as-code", "github-actions", "static-analysis", "semgrep", "terraform"]
phying_url: "https://phying.com/item/1441"
lang: en
---

# 35 more Semgrep rules: infrastructure, supply chain, and Ruby

## Summary

Trail of Bits published 35 new Semgrep rules (115 total) covering GitHub Actions OIDC gaps, Terraform/Nomad infrastructure issues, and Ruby flaws, plus a deep dive into regex mode and HCL support.

## Intelligence Metadata

- **Sources:** blog.trailofbits.com
- **Published:** 2024-12-09 14:00
- **Original:** https://blog.trailofbits.com/2024/12/09/35-more-semgrep-rules-infrastructure-supply-chain-and-ruby/
- **Phying News:** https://phying.com/item/1441