4 ms·
Hey, I work on Semgrep. As a real world example, I just noticed today that Hashicorp uses a whole bunch of Semgrep rules on terraform-provider-aws[0]. I'd recom
by underyx 5y ago
Hey, I work on Semgrep. As a real world example, I just noticed today that Hashicorp uses a whole bunch of Semgrep rules on terraform-provider-aws[0]. I'd recommend reading the `message` keys to know what they intend to match, and then the `patterns` lists below to see how that's accomplished.
Alternatively, we curate 1000+ community rules that you can look through as well.[1]
[0]: https://github.com/hashicorp/terraform-provider-aws/blob/main/.semgrep.yml https://github.com/hashicorp/terraform-provider-aws/blob/mai...
[1]: https://semgrep.dev/r https://semgrep.dev/r
- SavantIdiot 5y agoNice! Thanks. This will certainly help me start to thinking in semantic grep. I can see this being an additional coverage tool and am eager to study it.