Tag: Semgrep
-
Hacker News: Popular GitHub Action tj-actions/changed-files is compromised
Source URL: https://semgrep.dev/blog/2025/popular-github-action-tj-actionschanged-files-is-compromised/ Source: Hacker News Title: Popular GitHub Action tj-actions/changed-files is compromised Feedly Summary: Comments AI Summary and Description: Yes Summary: Semgrep is a security tool that facilitates collaboration between security teams and developers, promoting a shift-left approach in software development. It emphasizes the importance of delivering actionable security insights without disrupting the development…
-
Hacker News: Did Semgrep Just Get a Lot More Interesting?
Source URL: https://fly.io/blog/semgrep-but-for-real-now/ Source: Hacker News Title: Did Semgrep Just Get a Lot More Interesting? Feedly Summary: Comments AI Summary and Description: Yes Summary: The text discusses the evolving role of LLM-driven development tools like Cursor in code generation and security, particularly in leveraging Semgrep for vulnerability detection. It highlights the potential for closed-loop LLM…