semgrep is a linter for Go, Java, JavaScript, JSON, Python, Ruby, TypeScript and YAML.

You can enable the semgrep linter with:

trunk check enable semgrep

Auto Enabling

semgrep will be auto-enabled if any of its config files are present: .semgrep.yaml, .semgrep.yml.


semgrep supports the following config files:

  • .semgrep.yaml

  • .semgrep.yml

You can move these files to .trunk/configs and trunk check will still find them. See Moving Linter Configs for more info.

Last updated