??A very popular GitHub Action, tj-actions/changed-files, has been compromised with a payload that appears to attempt to dump secrets, impacting thousands of CI pipelines. If you’re using this action, we recommend you stop using it immediately. More here including how to search across all the GitHub Actions used in your org: https://lnkd.in/g7f4KixU
Semgrep
软件开发
San Francisco，California 12,450 位关注者
Semgrep is a code scanning platform for finding first and third-party security vulnerabilities in your code base.
关于我们
We’re Semgrep, a software security company. Our mission is to profoundly improve software security and reliability to safeguard human progress. We maintain Semgrep, a tool to find bugs and reachable dependency vulnerabilities in code. Semgrep lets you enforce your code standards on every commit. With 2,000+ existing rules and simple-to-create custom ones, it finds the bugs that matter. Semgrep can run anywhere: in CI, your editor, or the command-line. Plus, with dedicated infrastructure from Semgrep, Inc., it’s easy to deploy, manage, and monitor Semgrep at scale. Semgrep is made with ? by Semgrep, Inc. We’re hiring: https://go.semgrep.dev/careers
- 网站
-
https://semgrep.dev
Semgrep的外部链接
- 所属行业
- 软件开发
- 规模
- 51-200 人
- 总部
- San Francisco，California
- 类型
- 私人持股
- 创立
- 2017
地点
-
主要
获取路线
88 Kearny St
15F
US，California，San Francisco，94104
Semgrep员工
动态
-
Join us on March 18th at 9 AM PT to discover how Semgrep is changing the way we approach code scanning. If you’re tired of dealing with distractions and unnecessary alerts, this session is for you. ?? We’ll cover: ?? How Semgrep Assistant adapts to your feedback to cut down on irrelevant alerts. ? How to find and fix critical issues faster, boosting your efficiency. ?? Why AI-powered noise canceling makes code scanning more focused and productive. ?? Register here: https://lnkd.in/gi94RNtX #CodeScanning #DevOps #AI #Semgrep #Security #SoftwareDevelopment
-
-
The difference between being the last CI check and the second-to-last is huge. You don’t want your developers to see Semgrep as the blocker when clicking green merge buttons. That’s why we focus so heavily on performance: from fast diff scans to deep interfile analysis, we need to make sure Semgrep is fast and efficient. A huge shoutout to our team for upgrading Semgrep to OCaml 5, paving the way for even greater performance gains. This upgrade is live in both the Pro and Community versions of the engine! ???? Want to learn more about how we’re making these improvements? Read our blog post on upgrading Semgrep from OCaml 4 to OCaml 5 here: https://lnkd.in/gn9EspwN #DevOps #CI #OCaml #SoftwareEngineering #Semgrep?#appsec
-
-
? That’s a wrap! We had an incredible time at the Cloud & Cyber Security Expo! ?? Our Top Highlights: ??? Live booth demos showcasing the power of Semgrep AI Assistant & Memories ?? Exciting swag & book giveaways - always a crowd favourite! ??? An exclusive CISO dinner that sparked some great conversations ?Insightful sessions on the future of AppSec and leveraging AI to stay secure, compliant, and efficient A huge thanks to everyone who stopped by our booth, joined our sessions, or connected with us! Let’s keep the conversation going—what was your biggest takeaway from the event? ?? P.S. keep an ?? out for our CCSE summary blog post next week! #AppSec #Semgrep #CCSEL #CCSEL25 #TechShowLondon Nitin Nayar, Sebastián Revuelta, Anhel Alickovic, Kia Nejad, Sarah N., Jaweed Metz, Milan Williams, Katie Kent, Jolene Meijerink, Jackie Chandler, Chushi Li, Sam Mellor, Amanda McCarvill, Kathy Liu, Aaron Liao
-
-
A look into the future: what's next for AppSec? ?? A big thank you to everyone who joined Nitin Nayar and esure Group's Kenichi S. this afternoon at #CCSEL for a glimpse into the future of secure development! They dove into how AI and static analysis are merging to create autonomous AppSec engineering. ?? Imagine: AI-driven and compliant security that autonomously detects AND remediates threats... #AI #AppSec #FutureOfSecurity #Semgrep #CCSEL #CCSEL25 #TechShowLondon
-
-
? ?? Last night’s Security Leaders Dinner in London was an unforgettable evening! We connected with some amazing people in the AppSec community, all while enjoying great food, drinks, and insightful conversations. A huge thank you to everyone who joined us and helped make the night truly special! We can't wait to see you next time! ?? #AI #AppSec #Semgrep #CCSEL #CCSEL25 #TechShowLondon
-
-
Happy Thursday #CCSEL! ?? Come on by stand CS130, we’re ready to tackle your AppSec challenges head-on! ?? Stop in for live demos, expert advice, and swag (obviously! ??). Plus, don't miss Nitin Nayar and our guest speaker, esure Group’s Kenichi S., at the Keynote Stage at 15:35: LLMs vs. SAST? It's not a battle, it's a beautiful collaboration! Let's make AppSec smarter together! ???? #AI #AppSec #Semgrep #CCSEL #CCSEL25 #TechShowLondon
-
-
What a fantastic first day at #CCSEL! ?? A big thank you to everyone who stopped by for a chat. We loved hearing what you would do if 20% of your backlog disappeared overnight. These were some of our favourites! What would you do? ?? #AppSec #Semgrep #CCSEL #CCSEL25 #TechShowLondon
此处无法显示此内容
在领英 APP 中访问此内容等
-
CCSE is in full swing! ?? A huge thank you to everyone who joined Sebastián Revuelta, our Customer Success Engineer, for this morning's panel discussion on integrating security and agility into your DevOps pipeline. ?? Tonight, we're hosting an exclusive dinner for EMEA Security Leaders after the show. Let us know if you’re interested in joining & RSVP here: https://lnkd.in/gtaKzHYe #AppSec #Semgrep #CCSEL #CCSEL25 #TechShowLondon #DevSecOpsPanel
-