semgrep Semgrep is a fast, open-source, static analysis tool for finding bugs. https://github.com/returntocorp/semgrep