Has anyone actually used Semgrep?
Semgrep is now listed under Security & Privacy. An extensible developer-friendly application security platform that scans source code to surface true and actionable security issues with AI-assisted SAST, SCA, and Secrets Detection solutions. Looking for first-hand takes rather than landing-page copy. What is it genuinely good at, and where does it fall down? No account needed to reply.
We evaluated Semgrep against two others. It won on price, lost on integrations.