sources / opengrep/opengrep

opengrep/opengrep

The checks this repository runs, scanned at 20b89a9, and the review prompts derived from its discussions.

4 recognised tools

7 prompts

1546 stars

Static analysis

2 tools

Tool	Kind	Command	Runs in	Found in
`flake8`	Linting	`pre-commit hook flake8`	pre-commit	.pre-commit-config.yaml
`semgrep`	Security scanning	`pre-commit hook semgrep`	pre-commit	.pre-commit-config.yaml

2 tools

Tool	Kind	Command	Runs in	Found in
`pre-commit-hooks`	File hygiene	`pre-commit hook check-added-large-files` `pre-commit hook check-ast` `pre-commit hook check-case-conflict`	pre-commit	.pre-commit-config.yaml
`prettier`	Formatting	`pre-commit hook prettier`	pre-commit	.pre-commit-config.yaml

18 other commands the scanner could not classify

Commands from CI steps and task runners that look like checks but match no known tool. Some are checks, some are not.

Write-Error Default install did not resolve the latest stable version ($latestTag)
Write-Error Failed to resolve the expected latest tag via gh
api repos/opengrep/opengrep/releases/latest --jq .tag_name)
bash ./install.sh --verify-signatures
cygcheck -c
nix flake check -L .?submodules=1#
nix flake check .?submodules=1#
nix run github:DeterminateSystems/flake-checker
pre-commit hook check-docstring-first
pre-commit hook check-shebang-scripts-are-executable
pre-commit hook check-symlinks
pre-commit hook check-vcs-permalinks
pre-commit hook check-xml
pre-commit hook destroyed-symlinks
pre-commit hook fix-encoding-pragma
pre-commit hook no-commit-to-branch
pre-commit hook requirements-txt-fixer
pre-commit hook semgrep-docker-develop

most discussed first