Semgrep is an open-source static analysis (SAST) tool that finds bugs, security vulnerabilities and coding-standard violations using code-like patterns across 30+ languages.
