Semgrep Reviews

Terraform Reviews

Semgrep mentions (7)

• Tree-Sitter

  > Not sure I understand your point. The problem is using Treesitter (for syntax highlighting and "semantic movements") and an LSP at the same time. So if your language has a LSP, using Treesitter additionally is redundant at best and introduces inconcistency at worst. I'm not talking about using Treesitter as the parser for the LSP. > Most popular languages have language-specific tools I'd say even less popular... - Source: Hacker News / 4 months ago

• Powerful SAST project for Android Application Security

  This project is a compilation of Semgrep rules derived from the OWASP Mobile Application Security Testing Guide (MASTG) specifically for Android applications. The aim is to enhance and support Mobile Application Penetration Testing (MAPT) activities conducted by the ethical hacker community. The primary objective of these rules is to address the static tests outlined in the OWASP MASTG. Source: almost 1 year ago

• Do you SecDevOps?

  For generally code analysis, I used Semgrep in the past. Source: over 1 year ago

• Username/password scanner for network share

  You can try with Semgrep. For scanning shared drive you need to have the access though. Source: over 1 year ago

• Spring Actuator - Finding Actuators using Static Code Analysis - Part 2

  For these cases, let me introduce you to my favorite static code analysis tool: semgrep. It's a free Open Source tool that you can install and use right now (it only starts costing money if you want to use their dashboard to view the results, which is entirely optional, and all code scanning runs on your device - code is never uploaded to any servers). As stated briefly, semgrep searches for code matching specific... - Source: dev.to / over 1 year ago

Terraform mentions (31)

• Integrating Terraform with CI/CD Pipelines

  In recent years, there has been a significant shift towards automation of infrastructure deployment processes. One popular tool that has emerged as a key player in this space is Terraform, an open-source infrastructure as code (IaC) software tool developed by HashiCorp. This article will explore how Terraform can be integrated into continuous integration and delivery (CI/CD) pipelines using GitHub Actions as an... - Source: dev.to / 3 months ago

• Deploying Your Outdoor Activities Map with Terraform

  Terraform is an open-source infrastructure-as-code software tool created by HashiCorp. It allows you to define and manage your infrastructure as code, making it easy to provision and manage resources across multiple cloud providers. With Terraform, you can ensure consistent and repeatable deployments, making it an ideal choice for automating your cloud infrastructure. - Source: dev.to / 10 months ago

• Trigger CI using Terraform Cloud

  Continuous Integration(CI) pipelines needs a target infrastructure to which the CI artifacts are deployed. The deployments are handled by CI or we can leverage Continuous Deployment pipelines. Modern day architecture uses automation tools like terraform, ansible to provision the target infrastructure, this type of provisioning is called IaaC. - Source: dev.to / about 1 year ago

• Using Let's Encrypt with the Puppet Enterprise console

  Had an itch I've been meaning to scratch for a while. I build my Puppet environment using Terraform, which makes it nice and easy to tear things down and rebuild them. That is great, but it does leave me with an issue when it comes to the console SSL certificates. - Source: dev.to / about 1 year ago

• Would you give No Code tools a try, if you could export 100% of the code and let your devs take over?

  If you don't know what Terraform is, you can learn here https://terraform.io. Source: over 1 year ago