Submissions from semgrep.dev

		New Sandbox Escape Affecting Popular Node.js Sandbox Library Vm2 (semgrep.dev)
		5 points by j12y 68 days ago \| past
		Security Engineers – a MCP audit checklist for you (semgrep.dev)
		7 points by kaboberg 6 months ago \| past \| 1 comment
		Finding vulnerabilities in Python web apps using Claude Code and OpenAI Codex (semgrep.dev)
		13 points by neuroo 7 months ago \| past
		Nx compromised: malware uses Claude code CLI to explore the filesystem (semgrep.dev)
		493 points by neuroo 7 months ago \| past \| 39 comments
		Making zero false positive SAST a reality (semgrep.dev)
		4 points by wslh 9 months ago \| past
		Show HN: Replit and Semgrep – Real-time security scanning in the browser (semgrep.dev)
		2 points by ebuchanan 10 months ago \| past
		Semgrep Assistant: Your AI Appsec Engineer (semgrep.dev)
		2 points by wslh 11 months ago \| past
		Free Course on Security Headers, for Developers (semgrep.dev)
		12 points by shehackspurple 11 months ago \| past \| 3 comments
		Popular GitHub Action tj-actions/changed-files is compromised (semgrep.dev)
		282 points by moyer on March 15, 2025 \| past \| 4 comments
		Upgrading Semgrep from OCaml 4 to OCaml 5 (semgrep.dev)
		7 points by ajbt200128 on March 12, 2025 \| past
		Show HN: Semgrep Assistant, a set of surgical AI tools for AppSec (semgrep.dev)
		8 points by underyx on Jan 22, 2025 \| past \| 4 comments
		Semgrep Updates OSS Licensing (semgrep.dev)
		2 points by rohansood15 on Jan 15, 2025 \| past
		The tech behind Semgrep Assistant's triage and remediation guidance (semgrep.dev)
		4 points by pabloest on Aug 22, 2024 \| past
		Lsp.js: Using WASM and JavaScript to Support OCaml on Windows (semgrep.dev)
		12 points by ajbt200128 on May 2, 2024 \| past \| 1 comment
		Semgrep – Find bugs and enforce code standards (semgrep.dev)
		3 points by s4i on April 9, 2024 \| past
		Three key learnings for AppSec teams from the XZ backdoor (semgrep.dev)
		2 points by rrampage on April 8, 2024 \| past
		Securing CodeQL queries using Semgrep (semgrep.dev)
		11 points by brandonspark on April 1, 2024 \| past \| 2 comments
		Semgrep Secrets (semgrep.dev)
		3 points by ievans on Oct 24, 2023 \| past
		Guardrails for PromQL Using Semgrep (semgrep.dev)
		2 points by mooreds on Aug 30, 2023 \| past
		Guardrails for PromQL Using Semgrep (semgrep.dev)
		14 points by ievans on Aug 8, 2023 \| past
		Semgrep: Semantic Grep for Code (semgrep.dev)
		2 points by rrampage on Aug 4, 2023 \| past
		How we resolved the ‘HTTP request failed: timeout’ issue in OCaml (semgrep.dev)
		4 points by tpetr on July 7, 2023 \| past
		Crosscompiling OCaml to JavaScript and WASM to Make Semgrep Playground Fast (semgrep.dev)
		5 points by ievans on June 9, 2023 \| past
		Semgrep’s VS Code Extension: Powerful SAST as Fast as Linting (semgrep.dev)
		4 points by ajbt200128 on June 8, 2023 \| past \| 1 comment
		It’s Turbo time: how we made the Semgrep Playground super fast (semgrep.dev)
		5 points by todsacerdoti on June 6, 2023 \| past
		We put GPT-4 in Semgrep to point out false positives and fix code (semgrep.dev)
		2 points by antondd on April 7, 2023 \| past
		We put GPT-4 in Semgrep to point out false positives and fix code (semgrep.dev)
		4 points by underyx on April 4, 2023 \| past
		Semgrep’s Beta Support for Rust (semgrep.dev)
		1 point by pabloest on March 3, 2023 \| past
		Semgrep Code: SAST designed and built for engineers (semgrep.dev)
		2 points by ievans on Feb 14, 2023 \| past
		XML Security in Java (semgrep.dev)
		2 points by cgaikwad on Jan 19, 2023 \| past \| 1 comment
		More

HN For You