30 new Semgrep rules: Ansible, Java, Kotlin, shell scripts, and more

Published

2024-01-17 13:30

Collected

2026-07-03 03:52

---
id: 1562
title: "30 new Semgrep rules: Ansible, Java, Kotlin, shell scripts, and more"
source_domain: blog.trailofbits.com
source_url: "https://blog.trailofbits.com/2024/01/17/30-new-semgrep-rules-ansible-java-kotlin-shell-scripts-and-more/"
published_at: "2024-01-17T13:30:32Z"
tags: ["java", "sast", "static-analysis", "trail-of-bits", "semgrep", "ansible", "kotlin", "docker-compose"]
phying_url: "https://phying.com/item/1562"
lang: en
---

# 30 new Semgrep rules: Ansible, Java, Kotlin, shell scripts, and more

## Summary

Trail of Bits released 30 Semgrep rules for Ansible, Java/Kotlin, shell scripts, and Docker Compose, flagging unencrypted transport and disabled SSL checks, with a primer on generic mode and YAML.

## Intelligence Metadata

- **Sources:** blog.trailofbits.com
- **Published:** 2024-01-17T13:30:32Z
- **Original:** https://blog.trailofbits.com/2024/01/17/30-new-semgrep-rules-ansible-java-kotlin-shell-scripts-and-more/
- **Phying News:** https://phying.com/item/1562