Semgrep is a fast, open-source, static analysis engine for finding bugs, detecting dependency vulnerabilities, and enforcing code standards. With 2,000+ built-in rules and easy-to-create custom ones, it finds the bugs that matter.

• Open source engine, works on 25+ languages
• Scan with 2,000+ community rules
• Write rules that look like your code
• Quickly get results in the terminal, editor, or CI/CD
• Flag issues and get results in pull requests, Slack, + more

Repo maintenance is hard — you could use a hand

Ranger is a sidekick for repo maintainers. It reduces the burden of repository maintenance by automating common tasks, like:

• Auto-merging pull requests when all the status checks pass
• Auto-closing issues when a specific label is applied after a preconfigured amount of time
• Creating frequent comments in a standardized manner
• Auto-deleting branches after pull requests have been merged
• and more!