OpengrepStatic analysis engine for finding code patterns and security vulnerabilities.LGPL-2.1
Static analysis engine for finding code patterns and security vulnerabilities.
Opengrep scans source code for configurable patterns and potential security issues using static analysis. Developers run its command-line tool against code directories with YAML rules, including existing Semgrep rulesets. It supports multiple programming languages, intrafile taint analysis and JSON or SARIF reports, with self-contained binaries available for local installation and integration into development tooling.
Opengrep README · Reviewed 2026-10-31
- 01 / Feature noteCustom pattern rules
Define YAML rules describing code patterns, languages and finding messages, then scan selected directories.
Feature source ↗ - 02 / Feature noteMachine-readable findings
Export scan results in JSON or SARIF for use by other development tools.
Feature source ↗
GitHub stars
3,281
Detected license
LGPL-2.1
Repository created
2024-12-14
Repository push
2026-11-03
2024-12-14GitHub release
2026-10-29 · v1.33.1Repository push
2026-11-03
GitHub stars
Unknown
i
Cached history uses a different month window; chart withheld until aligned.
Latest attempt: ok · Checked 2026-10-16T00:57:19.371756+00:00 · Last successful fetch 2026-10-16T00:57:19.371756+00:00 · Provider source
Hacker News stories
Unknown
i
OpenSSF Scorecard
Unknown
i
No result returned.
Checked 2026-10-27T00:18:10Z · Latest attempt: not found · Provider source
GitHub release
Published 2026-10-29
i
Checked 2026-11-04T04:04:05Z · Last successful fetch 2026-11-04T04:04:05Z · Value fetched 2026-11-04T04:04:05Z · Provider source
Unknown
