Semgrep

Semgrep develops fast, developer-friendly static analysis and application security tools, including an open-source scanner and a platform combining AI-assisted SAST, supply chain analysis, and secrets detection.