Skip to content

Pull requests: semgrep/semgrep-rules

New pull request New
126 Open 3,186 Closed
126 Open 3,186 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

ci: replace pre-commit/action with reusable workflow [SEC-2479]
#4015 opened Jul 23, 2026 by leifdreizler Contributor Loading…
fix: resolve false negative in asyncpg-sqli rule by migrating to taint mode
#4014 opened Jul 23, 2026 by anannayamustcode Loading…
1
2
Merge develop into release
#4012 opened Jul 20, 2026 by p4p3r Collaborator Loading…
Fix uv cooldown rule with brackets in TOML sections
#4011 opened Jul 20, 2026 by Eljees • Draft
1
2
fix(gha): skip non-bash shells in curl nested-bash rules
#4005 opened Jul 16, 2026 by l46983284-cpu Loading…
2 tasks done
1
2
fix(terraform): allow AWS FIPS TLS policies in insecure-load-balancer-tls-version
#4003 opened Jul 14, 2026 by sbruton Loading…
1
New Published Rules - ka_beraoud_esi_dz.limit-overrun-race-condition
#4000 opened Jul 12, 2026 by semgrep-dev-pr-bot Bot Loading…
renovate: don't flag packageRules covered by a top-level minimumReleaseAge
#3999 opened Jul 10, 2026 by munzzyy Loading…
1
1
Remove obsolete rule javascript.lang.correctness.no-replaceall
#3998 opened Jul 10, 2026 by munzzyy Loading…
1
1
fix: Solidity move basic-oracle-manipulation test annotation to the matched line
#3997 opened Jul 10, 2026 by malaverdiere Loading…
1 of 2 tasks
@malaverdiere
Add ML deserialization rules (torch.load, joblib, pandas.read_pickle,…
#3992 opened Jul 8, 2026 by DipesThapa Loading…
1
2
Detect insecure BuildKit RUN steps
#3991 opened Jul 8, 2026 by theinfosecguy Contributor Loading…
Add FastAPI TrustedHost rule
#3989 opened Jul 6, 2026 by theinfosecguy Contributor Loading…
Improve FastAPI CORS coverage
#3988 opened Jul 6, 2026 by theinfosecguy Contributor Loading…
New Published Rules - help_marketingtool_pro.detected-sonarqube-docs-api-key-copy
#3987 opened Jul 5, 2026 by semgrep-dev-pr-bot Bot Loading…
Add LangChain agent-tool security rules (ShellTool, PythonREPL)
#3986 opened Jul 3, 2026 by camgrimsec Loading…
4
fix(csharp): extend xpath-injection rule with interpolated strings and SelectSingleNode
#3982 opened Jun 27, 2026 by SkajeDev Loading…
2 tasks done
2
Add python.fastapi.security.path-traversal-file-response rule
#3981 opened Jun 27, 2026 by 0xjjjjjj Loading…
1
Add comprehensive Android WebView security rules (XSS, File Access, Universal Access)
#3980 opened Jun 27, 2026 by Mehrdoost Loading…
1
fix(gosql-sqli): match ExecContext in method regex
#3888 opened Jun 18, 2026 by arpitjain099 Loading…
1
feat(ai): add llm-output-to-xss taint rules for Python & JS/TS
#3887 opened Jun 18, 2026 by MR-SS Loading…
8
feat(ai): add llm-output-to-sql-injection taint rules for Python & JS/TS
#3886 opened Jun 18, 2026 by MR-SS Loading…
2
Even more package manager security rules
#3885 opened Jun 16, 2026 by gbennett-squarespace Contributor Loading…
[SEC-6076] Altering Scala severity names
#3881 opened Jun 12, 2026 by randall-wyatt Loading…
1
Add AI agent supply-chain rules: credential exfil, config backdoor, rules-file backdoor
#3879 opened Jun 11, 2026 by eeee2345 Contributor Loading…
ProTip! Type g i on any issue or pull request to go back to the issue listing page.