Announcing the Trail of Bits and Semgrep partnership

Summary: Trail of Bits announced a partnership with Semgrep, initiated by CEO Dan Guido after observing that many clients do not use Semgrep to its fullest potential or at all. Trail of Bits said it uses Semgrep as one of the first tools its application security team implements when auditing a codebase, and that it has published 115 public custom Semgrep rules.
Bottom line: Trail of Bits states many of its own clients underuse or skip Semgrep entirely, which points to a gap between the tooling available for finding low-complexity bugs and code patterns and what teams actually run during assessments.

Read the original at Trail of Bits Blog ↗