Blogs

Powerfully autofixing code with Semgrep's new AST-based approach

Semgrep

❗ tl;dr: In this blog post, I explain why AST-based autofix is better than text-based autofix and how Semgrep implements AST-based autofix to improve correctness Introduction Semgrep, a portmanteau of semantic grep, has proven itself to be a powerful code searching tool.

Visit Site

Enterprise Scale Code Scanning: Semgrep Managed Scans Crossed 1 MILLION Weekly ScansSemgrep Fix What Matters, Faster: How Semgrep and Sysdig Are Unifying Security from Code to RuntimeSemgrep Finding vulnerabilities in modern web apps using Claude Code and OpenAI CodexSemgrep Code to cloud noise reduction - Prioritizing code security with Semgrep & WizSemgrep New React2Shell Offspring Patched: React Server Components (DoS) and Source Code ExposureSemgrep Remote Code Execution Security Bug in React Server Components PatchedSemgrep Docs-as-code solutions for API teams: how to choose the right platform in 2026Mintlify Mintlify Alternatives: What to Consider (and Why There's No True Substitute)Mintlify Build a Presentation Coaching Application with Recall - Deepgram Blog ⚡️Deepgram No Code Transcription: Simplifying Workflows with Deepgram and Make.comDeepgram How Argo CD and OpenShift Enable GitOps for DevelopersThenewstack Oso Unbundles Security AuthorizationThenewstack Empower Your Team with Policy as CodePulumi IaC Best Practices: Implementing RBAC and SecurityPulumi Five Years of Infrastructure as CodePulumi New Policy as Code Capabilities with CrossGuardPulumi Godoc: documenting Go code - The Go Programming LanguageGo Managing dependencies - The Go Programming LanguageGo Butter is joining ModalModal How Hunch supercharged AI workflows with Modal SandboxesModal