Semgrep é a resposta

Com a experiencia. Mas, vc pode tentar submeter seu código ao semgrep (ferramenta de análise de código estático). Ele meio que "dedura" todas as más práticas do seu código, erros, bugs, problemas de sec etc...ajuda, sabe?

Ta, aplica agora um semgrep cli nisso daí pra tu ver a zica

a close up of a man 's face with the word david on the bottom left

ALT: a close up of a man 's face with the word david on the bottom left

Alguém aí usa? github.com/semgrep/semg...

GitHub - semgrep/semgrep: Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code. - semgrep/semgrep

Semgrep Launches Partner Programs to Strengthen Joint Customer Security www.viv-media.com/infozx-34403...

semgrepとかast-grepみたいな感じだけど、独自構文がちっと強すぎる感じがする "Grit" https://about.grit.io/

見てる: "Release Release v1.87.0 · semgrep/semgrep" https://github.com/semgrep/semgrep/releases/tag/v1.87.0

Thank you to @semgrep#OWASPsf.globalappsec.org/#developer#appsec#cybersecurity#ai

Automated Bug Hunting With Semgrep

Brutal. All it took was a little semgrep to find 14 new WordPress plugin vulnerabilities. projectblack.io/blog...

CVE Hunting Made Easy

In just three Sunday afternoons, I discovered 14 CVEs - and you can too! CVE hunting is more accessible than many realise, and the methodology outlined here requires only a bit of coding knowledge.