---
title: "Semgrep"
description: "1 posts about Semgrep, summarised, each linking to the original."
---

# Semgrep
> 1 posts about Semgrep, summarised, each linking to the original.

## Articles

### [Did Semgrep Just Get A Lot More Interesting?](https://yomu.fyi/post/did-semgrep-just-get-a-lot-more-interesting.md)
- Company: [Fly.io](https://yomu.fyi/company/fly-io.md)
- Published: Feb 10, 2025
- Type: Explainer

Thomas Ptacek considers whether LLM-driven coding agents could make Semgrep more useful by closing the loop between code generation, execution, and automated repair. He describes Semgrep as a semantics-aware code-search tool whose symbolic variable placeholders and ordinary code can express vulnerability patterns, while noting that teams rarely have time to build extensive rule libraries. Drawing on Cursor’s rules feature, including rules that help organize or generate other rules, he proposes having an agent observe runtime errors, generalize fixes into unit tests, and generate Semgrep rules for the underlying bug. The proposed workflow would test each rule with positive and negative controls, save it, scan the codebase, and fix newly found instances. The post concludes that this adaptive process may be more compelling than predicting every failure in advance.