Re:Semgrep: Lightweight static analysis for many languages
by ipsum2 on Wednesday July 22, 2020 @03:25PM
(#23920609)
> Semgrep started as a Facebook open-source project
Which project was this? I haven't heard of it before.
Re:Semgrep: Lightweight static analysis for many languages
by ievans on Wednesday July 22, 2020 @03:52PM
(#23920861)
https://github.com/facebookarchive/pfff where it was named “sgrep”. pfff is maintained by @aryx who was the original author and is a Facebook alum, see https://github.com/returntocorp/pfff for the official fork
Re:Semgrep: Lightweight static analysis for many languages
by danpozmanter on Wednesday July 22, 2020 @09:52PM
(#23923424)
Impressive work!
Are there any plans to include C# or F#?
Re:Semgrep: Lightweight static analysis for many languages
by ievans on Friday July 24, 2020 @12:40PM
(#23941564)
C# is high on the list, F# isn't a priority at the moment though. Behind the scenes, we've recently changed to use tree-sitter as the parser library; if there is a good F# tree-sitter library integration becomes quite easy. I don't see one at https://tree-sitter.github.io/tree-sitter/ but perhaps there's one maintained elsewhere.
For context, Semgrep started as a Facebook open-source project inspired from a Inria project named Coccinelle, which has has made a couple thousand or so automatic patches to the Linux kernel over the years using a semantic patch language (http://coccinelle.lip6.fr/sp.php)