code.semgrepSemgrep SAST
Runs Semgrep with the community `auto` ruleset (downloads rules from the Semgrep registry).
- Engine
- Wrapped scanner
- Wraps
semgrep- Targets
- Codebase
- Areas
- Security, Best practices
- Runs
- By default, when the target applies
- Network
- Contacts services beyond the target
Run only this auditor
bunx openaudit . --only code.semgrepWraps semgrep. When it isn't installed, the auditor is skipped with an install hint and the rest of the audit runs.