Products & Services

Semgrep Supply Chain

Semgrep

Semgrep's Software Composition Analysis (SCA) helps developers prioritize reachable vulnerabilities when scanning source-code dependencies.

Visit Site

Semgrep Supply Chain
Beyond vulnerabilities: Detect malicious dependencies in your supply chainSemgrep Detect Open Source Malware Attacks with Semgrep Supply ChainSemgrep Training 201: Understanding Reachability on Github with Semgrep Supply ChainSemgrep London calling: Highlights from the 2025 cloud & cyber security expoSemgrep Boosting Security Scan Performance for Monorepos with Multicore Parallel ProcessingSemgrep Beyond Benchmarks: How Semgrep Redefines Javascript SecuritySemgrep How We Eliminated Long-Lived CI Secrets Across 70+ ReposPulumi NO_EXTERNAL_CSS_AT_IMPORTSVercel How Mondelez Accelerates Supply Chain Training Across 150+ Global Manufacturing PlantsSynthesia Announcing Socket Certified Patches: One-Click Fixes for Vulnerable DependenciesSocket Updated and Ongoing Supply Chain Attack Targets CrowdStrike npm PackagesSocket Supply Chain Attacks and Cloud Native: What You Need to KnowThenewstack Webinar Recap: Webinar Recap: Securing the Software Supply Chain with Docker BusinessDocker Popular npm Packages in the keyv and Cacheable Namespaces Compromised in Active Supply Chain AttackSocket Securing the Financial Frontier: How Capital One Uses Socket for Open Source SecuritySocket Supply Chain Attack on Axios Pulls Malicious Dependency from npmSocket Signing is Just the StartSocket How RHI Magnesita is creating AI video 40% faster and achieves 3x engagementSynthesia OpenAPI React Query Codegen Compromised in Mini Shai-Hulud npm Supply Chain AttackSocket Introducing Socket Firewall: Free, Proactive Protection for Your Software Supply ChainSocket