Skip to content
How to introduce Semgrep to your organization
blog.trailofbits.com | blog | #devsecops | #secure-coding | #ci-cd | #sast | #static-analysis | #trail-of-bits | #semgrep
Summary
Semgrep is a static analysis tool finding bugs across 30+ languages; this post outlines a seven-step plan to roll it out, pick rulesets, and integrate it into CI/CD.
- Published
- Collected