A single open-source security scanner for most languages on Jenkins

Presenter: Luke O'Malley. Meetup will be held in Zoom Webinar, RSVP to see the link. Time: 4PM UTC, Feb

As software security is becoming an increasingly bigger organization risk, static and dynamic analysis are becoming indispensable. However most popular open-source static analysis scanners cover only a handful of languages, or offer limited security rules. In this talk, we’ll present Semgrep, an open-source static analysis tool that support 12+ languages, and simplifies writing custom rules for organization-specific code patterns. In addition, we’ll show how to integrate Semgrep into a Jenkins Pipeline for scanning every commit or PR.

Docs: https://semgrep.dev/docs/integrations/#standalone-providers

References:

• https://semgrep.dev/
• https://www.jenkins.io/