Appreciation post: the free Semgrep rules my teammate set up in March caught a real bug in prod

Dylan Murray · 2026-10-15T08:20:02.680405+00:00

We were running it in CI since March 14 and it flagged an unsanitized redirect last Tuesday before it shipped. Anyone got a starter set of custom rules they actually trust, or do you just write them per repo?

SMM Buzz

Loading…

Appreciation post: the free Semgrep rules my teammate set up in March caught a real bug in prod | Appsec Tools - SMM Buzz