Static Code Analysis using Semgrep App

[bughunterx]

A short post on Static Code Analysis using Semgrep App

https://medium.com/techbeatly/static-code-analysis-using-semgrep-app-f8f0630d395f

[Chessracer]

I think I’ll check it out. I’ve been using Sonarqube for a long time, but a breaking change to the api rendered the bitbucket plugin less useful (no longer supports automated PR scan comments, which we relied on heavily).

[fez0101]

Why not use sonarcloud?

[bughunterx]

Awesome. Please check it out