The most advanced code security (SAST) engine - fully open-source. No paywall, no login.
Joined January 2024
- Tweets 179
- Following 22
- Followers 206
- Likes 100
37 Photos and videos
We ship every week. Follow along the public roadmap /opengrep/issues
What's shipped so far:
✅ windows compatibility (beta)
✅ fingerprints & metavariables restored (SARIF & JSON)
✅ desktop app for rule crafting
⏭️ elixir support
⏭️ cross-file analysis
⌛️inter-file...
24 Mar 2025
Are people still talking about opengrep? I thought that was a silly mistake we laughed at as an industry and went back to Semgrep, no?
4
10
893
Opengrep retweeted
npm recently introduced staged publishing, and it directly targets the attack pattern behind most of the supply chain compromises we tracked this year.
Instead of npm publish pushing packages live instantly, npm stage publish puts them in a queue. A human with 2FA has to approve, preventing attackers from pushing malicious package versions with stolen tokens
We open-sourced a SAST rule that catches "npm publish" in your GitHub Actions workflows and flags it for migration.
1
10
36
2,503
• A fix for a bug that caused taint to be dropped in some collection functions when using --𝚝𝚊𝚒𝚗𝚝-𝚒𝚗𝚝𝚛𝚊𝚏𝚒𝚕𝚎
Full changelog: github.com/opengrep/opengrep…
We ship every week. Catch you next release 🫡
52
• LSP mode now supports the --𝚝𝚊𝚒𝚗𝚝-𝚒𝚗𝚝𝚛𝚊𝚏𝚒𝚕𝚎 flag
• Improved the efficiency of pruning with --𝚎𝚡𝚌𝚕𝚞𝚍𝚎
Full changelog: github.com/opengrep/opengrep…
We ship every week. Catch you next release. 🫡
1
52
• Support for more Elixir features (e.g. "abc" <> x and ^x patterns, 𝚌𝚊𝚜𝚎 expressions)
• Fixes for patterns in function parameters in Clojure
Full changelog: github.com/opengrep/opengrep…
We ship every week. Catch you next release 🫡
56
⚡ Opengrep is now the only SAST engine with Brainf*ck support
We did it. We added Brainf*ck to Opengrep. No, we’re not sorry.
While other tools are still catching up on modern languages, we asked a different question: what about developers writing production code in Brainf*ck?
1
1
3
80
Pattern matching. Comment-aware parsing. Nested bracket analysis.
Get your binary → github.com/opengrep/opengrep…
Opengrep: Securing code in every language. Even that one.🫡
1
47
✨ Opengrep v1.16.5 is here.
Highlights:
• Improvements in recognizing language-specific built-in functions in intrafile tainting
• Elixir: support for multi-clause functions and interpolated strings
Full changelog: github.com/opengrep/opengrep…
2
49
Full changelog:
github.com/opengrep/opengrep…
We ship every week. Catch you next release 🤝
37