Semgrep Product Updates

Stay up to date on all of the changes to the Semgrep AppSec platform, big and small.
C# and PHP support

Semgrep Supply Chain can now find reachable vulnerabilities in C# dependencies. Along with C#, we also added lockfile-only support for PHP. Semgrep Supply Chain now supports C#, Go, Java, JavaScript, PHP, Python, Rust, and Ruby.

Scanning code for security issues using Semgrep's IntelliJ plugin

Use Semgrep’s plugin for IntelliJ products (AppCode, Aqua, CLion, DataSpell, DataGrip, GoLand, IntelliJ IDEA Ultimate, PhpStorm, PyCharm Professional, Rider, RubyMine, RustRover, WebStorm) to scan for Semgrep Code and Supply Chain vulnerabilities.

Chinmay Gaikwad
View recommendations from Semgrep Assistant

The findings page, in group by rule view, now has an assistant recommendation filter. When you filter to recommended ignores, we now show Assistant's explanation inline. Pressing 'Agree' there will automatically ignore the finding.

Learn more

Chinmay Gaikwad
Semgrep Assistant support for GitLab and GitLab self-managed

Semgrep Assistant (Semgrep’s AI integration) now supports GitLab and GitLab self-managed. Check out the documentation.

Chinmay Gaikwad
Rust GA support and Swift beta support

Semgrep Code’s support for Rust is now GA (Checkout our 70+ new Pro rules for Rust).
Semgrep Code’s support for Swift is now beta (Checkout our 50+ new Pro rules for Swift).

Chinmay Gaikwad
Integration with Jira

Use the Jira integration to create tickets for Semgrep Code and Supply Chain findings easily.