semgrep

semgrep is a linter for Go, Java, JavaScript, JSON, Python, Ruby, TypeScript and YAML

semgrep is a linter for Go, Java, JavaScript, JSON, Python, Ruby, TypeScript and YAML.

You can enable the semgrep linter with:

trunk check enable semgrep

Auto Enabling

semgrep will be auto-enabled if any of its config files are present: .semgrep.yaml, .semgrep.yml.

Settings

semgrep supports the following config files:

• .semgrep.yaml

• .semgrep.yml

You can move these files to .trunk/configs and trunk check will still find them. See Moving Linters for more info.

Links

• semgrep site

• semgrep Trunk Code Quality integration source

• Trunk Code Quality's open source plugins repo