Skip to content

Pull requests: semgrep/semgrep-rules

New pull request New
43 Open 3,021 Closed
43 Open 3,021 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

Romain/test-ok
#3717 opened Nov 25, 2025 by neuroo Loading…
4
Merge Develop into Release
#3716 opened Nov 25, 2025 by r2c-argo bot Loading…
1
New Published Rules - skajedevel_personal_org.xpath-injection-copy
#3713 opened Nov 23, 2025 by semgrep-dev-pr-bot bot Loading…
1
Add additional PHP LFI functions: file_get_contents, readfile, and fopen
#3711 opened Nov 14, 2025 by matejsmycka Loading…
2
New Published Rules - dominik_personal.nextjs-middleware-ssrf
#3710 opened Nov 2, 2025 by semgrep-dev-pr-bot bot Loading…
New Rules Proposal: Detect usage in java of an XML canonicalization method that excludes XML comments.
#3708 opened Oct 31, 2025 by righettod Loading…
New Rules Proposal: Detect usage of SHA1PRNG in java.
#3707 opened Oct 30, 2025 by righettod Loading…
New Rules Proposal: Detect exposure to log injection in java.
#3706 opened Oct 24, 2025 by righettod Loading…
Apply template scans to *.twig files
#3704 opened Oct 21, 2025 by Sjord Loading…
Update remediation suggestion for python.django.security.injection.open-redirect
#3703 opened Oct 20, 2025 by dimeko Loading…
1
Update formatted-sql-string rule message with better guidance
#3701 opened Sep 29, 2025 by stuartcmehrens Loading…
Add nextjs-images-wildcard-hostname security rule
#3700 opened Sep 28, 2025 by mortezapiri Loading…
1
New Published Rules - python.fastapi.ai.prompt-injection-fastapi.prompt-injection-fastapi
#3699 opened Sep 27, 2025 by semgrep-dev-pr-bot bot Loading…
4
New Published Rules - ahamedjobayer57_personal_org.detect-huggingface-unsafe-agent-run-copy
#3697 opened Sep 25, 2025 by semgrep-dev-pr-bot bot Loading…
3
New Published Rules - ahamedjobayer57_personal_org.pprof-debug-exposure-copy
#3695 opened Sep 23, 2025 by semgrep-dev-pr-bot bot Loading…
New Published Rules - ahamedjobayer57_personal_org.detected-jwt-token-copy
#3693 opened Sep 16, 2025 by semgrep-dev-pr-bot bot Loading…
1
New Published Rules - brigg_559_com.html-external-script-no-sri
#3687 opened Sep 10, 2025 by semgrep-dev-pr-bot bot Loading…
New Published Rules - brigg_559_com.html-target-blank-noopener
#3686 opened Sep 10, 2025 by semgrep-dev-pr-bot bot Loading…
Add missing GitHub Actions context variables to command injection rules
#3685 opened Sep 9, 2025 by ddworken Loading…
2
New Published Rules - princenchiba_demo.no-eval-prince-demo
#3684 opened Sep 8, 2025 by semgrep-dev-pr-bot bot Loading…
Detect XSS in trigger_error
#3682 opened Sep 3, 2025 by Sjord Loading…
1
Fix false positive for unquoted-attribute-var
#3680 opened Sep 2, 2025 by Sjord Loading…
1
Add observability rule for metrics name changes
#3679 opened Aug 28, 2025 by Essekar Loading…
2
Update GKE best practice to specify COS_CONTAINERD image type
#3677 opened Aug 20, 2025 by somethingnew2-0 Loading…
1
Use different scriptlet JSP to test no-scriptlets rule
#3676 opened Aug 18, 2025 by Sjord Loading…
1
1
ProTip! Type g i on any issue or pull request to go back to the issue listing page.