Description
Despite the fact that there is an open source repository containing community rules, some Semgrep users prefer to keep their custom rules in repositories that they manage.
The goal of semgrep-rules-manager is to collect high-quality Semgrep rules from third-party sources. It allows you to examine information about a source, download it, and check for and retrieve remote updates. If a downloaded source no longer meets your requirements, semgrep-rules-manager can handle deletion procedures.
Included rules
This online search engine allows you to explore the rules included in semgrep-rules-manager.
Included sources
| Identifier | Rules per Language | Author | License |
|---|---|---|---|
community |
378 for Python, 364 for Terraform, 237 for Regex, 213 for JavaScript, 207 for TypeScript, 128 for Java, 110 for YAML, 97 for Go, 90 for Generic, 89 for Ruby, 64 for PHP, 50 for Solidity, 49 for C#, 39 for Dockerfile, 34 for OCaml, 25 for Scala, 22 for JSON, 19 for Kotlin, 17 for C, 12 for Apex, 11 for Rust, 9 for Bash, 7 for Swift, 7 for Elixir, 5 for Clojure, 4 for HTML, 1 for Dart, 1 for XML, 1 for Lua | Semgrep | LGPL 2.1 |
gitlab |
102 for Java, 96 for JavaScript, 86 for Scala, 80 for Python, 62 for C, 62 for C++, 59 for Kotlin, 40 for Ruby, 27 for Go, 22 for C#, 13 for TypeScript, 9 for PHP, 5 for Swift, 4 for Generic, 1 for YAML | GitLab | MIT |
trailofbits |
24 for Python, 24 for YAML, 18 for Go, 15 for Ruby, 14 for Generic, 9 for JavaScript, 9 for TypeScript, 9 for Terraform, 3 for Regex, 2 for Java, 2 for Kotlin, 1 for Rust, 1 for Swift | Trail of Bits | AGPL-3.0 |
0xdea |
48 for C++, 47 for C, 1 for Generic | Marco Ivaldi | MIT |
elttam |
50 for Java, 15 for Generic, 7 for JavaScript, 7 for Go, 7 for YAML, 6 for TypeScript, 5 for Python, 5 for C#, 1 for C, 1 for Kotlin, 1 for PHP | elttam | MIT |
kondukto |
5 for Dockerfile, 5 for PHP, 3 for Java, 3 for Go | Kondukto | |
dgryski |
66 for Go | Damian Gryski | MIT |
dotta |
7 for PHP, 3 for Kotlin, 1 for Java | Federico Dotta | MIT |
hashicorp |
4 for Terraform, 1 for Generic | Hashicorp | MPL-2.0 |
decurity |
57 for Solidity, 4 for Cairo, 2 for Rust | Decurity | CC BY-NC-SA 4.0 |
mindedsecurity |
37 for Java, 15 for XML, 1 for Generic | mindedsecurity | GPL3 |
akabe1 |
24 for Swift, 15 for Java, 8 for Generic | akabe1 | |
atlassian-labs |
35 for Java, 2 for Generic | atlassian-labs | LGPL 2.1 |
apiiro |
18 for Python, 14 for JavaScript, 14 for TypeScript, 12 for Java, 12 for Lua, 12 for Ruby, 11 for Clojure, 11 for C#, 11 for PHP, 11 for Scala, 10 for Dart, 10 for Rust, 7 for Go, 6 for Bash, 2 for Kotlin | apiiro | MIT |
Read more
This is only an excerpt from the README.md hosted on GitHub.
1 maintainer
Metadata
1 maintainer
Release files for semgrep_rules_manager 0.4.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| semgrep_rules_manager-0.4.0.tar.gz | 321.2 kB | Without provenance | Details for semgrep_rules_manager-0.4.0.tar.gz |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Actions Reset |
|---|---|---|---|---|
| semgrep_rules_manager-0.4.0-py3-none-any.whl | Python 3 | none | any | Details for semgrep_rules_manager-0.4.0-py3-none-any.whl |
Total release size: 645.8 kB
Release files / semgrep_rules_manager-0.4.0.tar.gz
| Download URL | semgrep_rules_manager-0.4.0.tar.gz |
|---|---|
| Size | 321.2 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
39f5d54f22a7dc31351da596eae1a5112bbfb9347fcf8ac07da4922dcebde0dc
|
|
BLAKE2b-256 checksum How to use checksums |
5bb5628d14de228c14320a73fccf033958a1574a5cef3e5ee1905a138361cb88
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
poetry/2.2.1 CPython/3.14.0 Darwin/25.1.0
|
Release files / semgrep_rules_manager-0.4.0-py3-none-any.whl
| Download URL | semgrep_rules_manager-0.4.0-py3-none-any.whl |
|---|---|
| Size | 324.6 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
6d9dcc3542028ab1dd3187354d11b98a1711301fe0871f327b4f434ae31f91bc
|
|
BLAKE2b-256 checksum How to use checksums |
ea6a3bd1d0eaca86b343c94e8ed84fc9bbebb84dd375e8ed81c6f77d262a350a
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
poetry/2.2.1 CPython/3.14.0 Darwin/25.1.0
|
Security for semgrep_rules_manager 0.4.0
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.
