Lightlines
By trailofbits

semgrep-rule-creator

trailofbits5.3k installs

Catch unsafe code with tested Semgrep rules.

What it does

Creates tested custom Semgrep rules that detect security vulnerabilities and unwanted code patterns.

When to use it

Use when writing custom Semgrep rules for bug patterns, security vulnerabilities, data flow issues, or coding standards.

How to use it

Give it a bug pattern to detect; it creates a tested Semgrep rule and an annotated test file.

What you provide

  • the bug pattern to detect

Uses

Latest review

What you need · 1

Requires the Semgrep CLI to validate the rule and run its tests.


Access · 2

This skill

Semgrep documentation

Read

Reads Semgrep documentation

Trail of Bits Testing Handbook

Read

Reads the Semgrep testing handbook