Re:Semgrep for Cloud Security
by woodruffw on Saturday December 12, 2020 @02:24PM
(#25400745)
Nice writeup! Tools like Semgrep and Bellybutton[1] have been invaluable to QA and API enforcement on some of my large research projects.
Clint (mentioned in the post) recently gave an in-depth talk at Empire Hacking on using Semgrep[2]. The talk covers some of the material in this post, as well as use on non-configuration languages.
Clint (mentioned in the post) recently gave an in-depth talk at Empire Hacking on using Semgrep[2]. The talk covers some of the material in this post, as well as use on non-configuration languages.
[1]: https://github.com/hchasestevens/bellybutton
[2]: https://www.youtube.com/watch?v=O5mh8j7-An8