Stories by ievans

Dayssincelastsupplychainattack.com

Chromium Security: The Rule of 2

98% of PyMySQL forks are vulnerable to SQL Injection

Semgrep: Semantic Grep for Code

Semgrep Secrets

The Evolution of Open Source Business Models

White House RFI on Open-Source Software Security and Memory Safe Languages

Guardrails for PromQL Using Semgrep

New Fellowship: How Sequoia Is Supporting Open Source

Crosscompiling OCaml to JavaScript and WASM to Make Semgrep Playground Fast

Critical vulnerability in Node vm2 Error.prepareStackTrace (CVE-2023-29017)

Semgrep Code: SAST designed and built for engineers

Need for speed: static analysis version

Trojanized Windows 10 Operating System Installers Targeted Ukrainian Government

Diplomacy and Meta AI’s Cicero

Ignore 98% of dependency alerts: introducing Semgrep Supply Chain

JavaScript static analysis comparison: ESLint vs. Semgrep

Sanitize your inputs? I think not

Protect Your GitHub Actions with Semgrep

Semgrep rules registry: 1,100+ linter rules