Blogs

It's time to ignore 98% of dependency alerts. Introducing Semgrep Supply Chain.

Semgrep

Let’s be honest: those of us that use a Software Composition Analysis (SCA) tool are already ignoring > 90% of its alerts.

Visit Site

Beyond vulnerabilities: Detect malicious dependencies in your supply chainSemgrep Detect Open Source Malware Attacks with Semgrep Supply ChainSemgrep How we built an AppSec AI that security researchers agree with 96% of the timeSemgrep London calling: Highlights from the 2025 cloud & cyber security expoSemgrep Boosting Security Scan Performance for Monorepos with Multicore Parallel ProcessingSemgrep Beyond Benchmarks: How Semgrep Redefines Javascript SecuritySemgrep Trigger automation - MintlifyMintlify Let’s Play Master and Servant: Real Time Synchronization Tool for Redis MigrationRedis Get email alerts for Facebook Messenger messagesZapier Flockport: Time to Start All Over Again and Return to LXC ContainersThenewstack Introducing CORPS: The 5 Pillars for a Robust Cloud Architecture FrameworkThenewstack Announcing the New Pulumi Partner ProgramPulumi How We Eliminated Long-Lived CI Secrets Across 70+ ReposPulumi Introducing New Slimmer Docker ImagesPulumi Introducing: H100s on ModalModal Jetpack Boost Handles Critical CSS For YouCss Tricks pg_duckdb: Splicing Duck and Elephant DNAMotherduck The Serverless Backend for Analytics: Introducing MotherDuck’s Native Integration on VercelMotherduck Introducing DocChat: GPT-4 Level Conversational QA Trained In a Few Hours - CerebrasCerebras Real-Time Computational Physics with Wafer-Scale Processing [updated]Cerebras