Blogs

We put GPT-4 in Semgrep to point out false positives & fix code

Semgrep

Semgrep is a code search tool many use for security scanning (SAST). We added GPT-4 to our cloud service to ask which Semgrep findings matter before we notify developers, and on our internal projects, it seemed to reason well about this task.

Visit Site

Fix What Matters, Faster: How Semgrep and Sysdig Are Unifying Security from Code to RuntimeSemgrep Imagine zero false positive SASTSemgrep Enterprise Scale Code Scanning: Semgrep Managed Scans Crossed 1 MILLION Weekly ScansSemgrep Finding vulnerabilities in modern web apps using Claude Code and OpenAI CodexSemgrep Code to cloud noise reduction - Prioritizing code security with Semgrep & WizSemgrep New React2Shell Offspring Patched: React Server Components (DoS) and Source Code ExposureSemgrep Docs-as-code solutions for API teams: how to choose the right platform in 2026Mintlify How we grew Mintlify by doing things that don't scaleMintlify Mintlify Alternatives: What to Consider (and Why There's No True Substitute)Mintlify Build a Presentation Coaching Application with Recall - Deepgram Blog ⚡️Deepgram No Code Transcription: Simplifying Workflows with Deepgram and Make.comDeepgram How to Conduct an AI Agent Security Audit [+ Checklist]Zapier The 8 Best HubSpot Alternatives in 2026Zapier The Best Video Editing Software in 2026 (Including Free Options)Zapier Integrate Jupyter Notebooks with GitHubThenewstack Oso Unbundles Security AuthorizationThenewstack Empower Your Team with Policy as CodePulumi Five Years of Infrastructure as CodePulumi New Policy as Code Capabilities with CrossGuardPulumi Godoc: documenting Go code - The Go Programming LanguageGo