Semgrep: Semantic grep for code

Re:Semgrep: Semantic grep for code by joj123 on Thursday April 22, 2021 @08:31PM (#26909757)

Out of curiosity, Is there value in doing this over (say) running a GitHub Action post commit and failing the build if it finds something nasty?

[ Parent | on HN ]

Re:Semgrep: Semantic grep for code by Spivak on Thursday April 22, 2021 @08:48PM (#26909859)

If you can catch it before the commit is even made then why do/wait for a build?

[ Parent | on HN ]

Re:Semgrep: Semantic grep for code by joj123 on Friday April 23, 2021 @01:56AM (#26911394)

Fair enough. Guess IDE plugins work even better for that

[ Parent | on HN ]

Re:Semgrep: Semantic grep for code by westurner on Friday April 23, 2021 @10:30AM (#26915130)

IDE plugins are not at all consistent from one IDE to another. Pre-commit is great for teams with different IDEs because all everyone needs to do is:

  [pip,] install pre-commit
  pre-commit install
  # git commit
  #   pre-commit run --all-files

  # pre-commit autoupdate

[ Parent | on HN ]