Metadata-Version: 2.1
Name: semgrep_rules_manager
Version: 0.3.1
Summary: Manager of third-party Semgrep rules
Home-page: https://github.com/iosifache/semgrep-rules-manager
License: MIT
Keywords: semgrep,semgrep-rules,semgrep-rules-manager,sast
Author: George-Andrei Iosif
Author-email: andrei.iosif@canonical.com
Requires-Python: >=3.10,<4.0
Classifier: Environment :: Console
Classifier: License :: OSI Approved :: MIT License
Classifier: Operating System :: OS Independent
Classifier: Programming Language :: Python :: 3
Classifier: Programming Language :: Python :: 3.10
Classifier: Programming Language :: Python :: 3.11
Classifier: Topic :: Security
Classifier: Topic :: Software Development :: Libraries :: Python Modules
Classifier: Topic :: Software Development :: Quality Assurance
Classifier: Topic :: System :: Software Distribution
Requires-Dist: click (>=8.1.6,<9.0.0)
Requires-Dist: gitpython (>=3.1.32,<4.0.0)
Requires-Dist: pyyaml (>=6.0.1,<7.0.0)
Requires-Dist: rich (>=13.4.2,<14.0.0)
Project-URL: Repository, https://github.com/iosifache/semgrep-rules-manager
Description-Content-Type: text/markdown

<p align="center">
    <img src="https://raw.githubusercontent.com/iosifache/semgrep-rules-manager/main/logo.png" height="256" alt="semgrep-rules-manager logo"/>
</p>

## Description

Despite the fact that there is an open source repository containing community rules, some Semgrep users prefer to keep their custom rules in repositories that they manage.

The goal of **`semgrep-rules-manager`** is to collect **high-quality Semgrep rules from third-party sources**. It allows you to examine information about a source, download it, and check for and retrieve remote updates. If a downloaded source no longer meets your requirements, `semgrep-rules-manager` can handle deletion procedures.

## Included Sources

| Identifier    | Rules per Language                                                                                                                                                                                                                                                                                                                                                                               | Author         | License   |
|---------------|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|----------------|-----------|
| `community`   | 364 for Terraform, 327 for Python, 288 for JavaScript, 228 for Regex, 221 for TypeScript, 136 for Java, 100 for Ruby, 95 for Generic, 90 for YAML, 84 for Go, 59 for PHP, 49 for Solidity, 48 for C#, 39 for Dockerfile, 25 for Scala, 24 for OCaml, 17 for Kotlin, 17 for C, 12 for Apex, 11 for Rust, 10 for JSON, 8 for Bash, 7 for Elixir, 5 for Clojure, 5 for Swift, 3 for HTML, 1 for Lua | Semgrep        | LGPL 2.1  |
| `gitlab`      | 93 for Scala, 75 for Python, 66 for Java, 64 for C, 31 for Go, 20 for C#, 11 for JavaScript, 10 for TypeScript                                                                                                                                                                                                                                                                                   | GitLab         | MIT       |
| `trailofbits` | 19 for Python, 15 for Go, 7 for JavaScript, 7 for TypeScript, 1 for Rust                                                                                                                                                                                                                                                                                                                         | Trail of Bits  | AGPL-3.0  |
| `0xdea`       | 47 for C++, 46 for C, 1 for Generic                                                                                                                                                                                                                                                                                                                                                              | Marco Ivaldi   | MIT       |
| `elttam`      | 35 for Java, 15 for Generic, 7 for YAML, 3 for JavaScript, 3 for Go, 2 for TypeScript, 1 for C#, 1 for Kotlin, 1 for Python, 1 for C, 1 for PHP                                                                                                                                                                                                                                                  | elttam         | MIT       |
| `kondukto`    | 5 for Dockerfile, 5 for PHP, 3 for Go, 3 for Java                                                                                                                                                                                                                                                                                                                                                | Kondukto       |           |
| `dgryski`     | 42 for Go                                                                                                                                                                                                                                                                                                                                                                                        | Damian Gryski  | MIT       |
| `dotta`       | 7 for PHP, 3 for Kotlin, 1 for Java                                                                                                                                                                                                                                                                                                                                                              | Federico Dotta | MIT       |
| `hashicorp`   | 4 for Terraform, 1 for Generic                                                                                                                                                                                                                                                                                                                                                                   | Hashicorp      | MPL-2.0   |

## Read Further

This is only an excerpt from the [`README.md` hosted on GitHub](https://github.com/iosifache/semgrep-rules-manager#readme).

