Software Alternatives, Accelerators & Startups

Semgrep VS Packer

Compare Semgrep VS Packer and see what are their differences

Semgrep logo Semgrep

Semgrep is a fast, open-source, static analysis tool for finding bugs and enforcing code standards at editor, commit, and CI time.

Packer logo Packer

Packer is an open-source software for creating identical machine images from a single source configuration.
  • Semgrep Landing page
    Landing page //
    2023-07-31
  • Packer Landing page
    Landing page //
    2023-09-15

Semgrep videos

Semgrep: a lightweight static analysis tool for security consultant and hackers

More videos:

  • Review - Using Semgrep and Jenkins for Static Code Analysis
  • Review - Workshop: Scaling your AppSec Program with Semgrep

Packer videos

No Packer videos yet. You could help us improve this page by suggesting one.

Add video

Category Popularity

0-100% (relative to Semgrep and Packer)
Code Analysis
100 100%
0% 0
DevOps Tools
0 0%
100% 100
Code Coverage
100 100%
0% 0
Continuous Integration And Delivery

User comments

Share your experience with using Semgrep and Packer. For example, how are they different and which one is better?
Log in or Post with

Reviews

These are some of the external sources and on-site user reviews we've used to compare Semgrep and Packer

Semgrep Reviews

We have no reviews of Semgrep yet.
Be the first one to post

Packer Reviews

Introduction to Top Open Source Virtualization Tools
Packer is notably light, high performing, and operates on every major operating system. It assembles and configures all the necessary components for a virtual machine then creates images that run on multiple platforms. Packer doesn’t replace configuration management tools like Puppet or Chef; as a matter of fact, when creating images, Packer can utilize tools like Puppet or...

Social recommendations and mentions

Packer might be a bit more popular than Semgrep. We know about 9 links to it since March 2021 and only 7 links to Semgrep. We are tracking product recommendations and mentions on various public social media platforms and blogs. They can help you identify which product is more popular and what people think of it.

Semgrep mentions (7)

  • Tree-Sitter
    > Not sure I understand your point. The problem is using Treesitter (for syntax highlighting and "semantic movements") and an LSP at the same time. So if your language has a LSP, using Treesitter additionally is redundant at best and introduces inconcistency at worst. I'm not talking about using Treesitter as the parser for the LSP. > Most popular languages have language-specific tools I'd say even less popular... - Source: Hacker News / 4 months ago
  • Powerful SAST project for Android Application Security
    This project is a compilation of Semgrep rules derived from the OWASP Mobile Application Security Testing Guide (MASTG) specifically for Android applications. The aim is to enhance and support Mobile Application Penetration Testing (MAPT) activities conducted by the ethical hacker community. The primary objective of these rules is to address the static tests outlined in the OWASP MASTG. Source: almost 1 year ago
  • Do you SecDevOps?
    For generally code analysis, I used Semgrep in the past. Source: over 1 year ago
  • Username/password scanner for network share
    You can try with Semgrep. For scanning shared drive you need to have the access though. Source: over 1 year ago
  • Spring Actuator - Finding Actuators using Static Code Analysis - Part 2
    For these cases, let me introduce you to my favorite static code analysis tool: semgrep. It's a free Open Source tool that you can install and use right now (it only starts costing money if you want to use their dashboard to view the results, which is entirely optional, and all code scanning runs on your device - code is never uploaded to any servers). As stated briefly, semgrep searches for code matching specific... - Source: dev.to / over 1 year ago
View more

Packer mentions (9)

  • Failed to connect to the host via SSH on Ubuntu 22.04
    If you have just upgraded to Ubuntu 22.04, and you suddenly experience either errors when trying to ssh into hosts, or when running ansible or again when running the ansible provisioner building a packer image, this is probably going to be useful for you. - Source: dev.to / over 1 year ago
  • Create a minimalist OS using Docker Containers and Hashicorp Packer
    I am already using Hashicorp Packer at work and for personal projects and I wanted to test This idea out by wrapping it a single Packer Template file. This reduces the level of maintaining a lot of small scripts, Dockerfiles and configurations and the user can simply trigger a couple of Commands to get a minimalist OS at the end of the process. - Source: dev.to / almost 2 years ago
  • After self-hosting my email for twenty-three years I have thrown in the towel. The oligopoly has won.
    And while it is a slight increase in complexity, it can be an overall net gain in functionality, configurability and reliability. Much like Packer is far more reliable and practical than manually making VM images sitting in front of a terminal, even though making the initial configuration takes some time. Source: almost 2 years ago
  • Customized Ubuntu Images using Packer + QEMU + Cloud-Init & UEFI bootloading
    Hashicorp Packer provides a nice wrapper / abstraction over the QEMU in order to boot the image and use it to set it up on first-boot. Instead of writing really long commands in order to boot up the image using QEMU, Packer provided a nice Configuration Template in a more Readable fashion. - Source: dev.to / almost 2 years ago
  • The journey of sharing a wired USB printer over the network
    Packer seemed like the perfect tool for the job. I have never used it before and wanted to get familiar with the tool. It doesn't come with ARM support out of the box, but there are two community projects to fill that niche. - Source: dev.to / about 2 years ago
View more

What are some alternatives?

When comparing Semgrep and Packer, you can also consider the following products

SonarQube - SonarQube, a core component of the Sonar solution, is an open source, self-managed tool that systematically helps developers and organizations deliver Clean Code.

Terraform - Tool for building, changing, and versioning infrastructure safely and efficiently.

Snyk - Snyk helps you use open source and stay secure. Continuously find and fix vulnerabilities for npm, Maven, NuGet, RubyGems, PyPI and much more.

Rancher - Open Source Platform for Running a Private Container Service

Codacy - Automatically reviews code style, security, duplication, complexity, and coverage on every change while tracking code quality throughout your sprints.

Puppet Enterprise - Get started with Puppet Enterprise, or upgrade or expand.