Semgrep Custom Rules Level 1
Learn to write custom Semgrep static analysis rules in this introductory course! Custom rules can be used to enforce secure guardrails, coding standards, or find bugs across your codebase.
Introduction
How to Get Started
Course Agenda
Why Write Custom Rules?
Use Cases
Meta Variables
Ellipses
Testing Rules
Additional Guidance
Scenario 1A: Bug Bounty Report
Scenario 1B: Bug Bounty Report
Scenario 1 Example
Scenario 2A: Tainted User Data Flowing to Vulnerable Package
A Hint to Help us Move Forward
Scenario 2B: Tainted User Data Flowing to Vulnerable Package
Scenario 3: Incorporating Developer Feedback & Best Practices
Scenario 4: API Endpoint Authentication
Additional Assignment
Rule-writing resources
Course Survey
Thank you for attending Semgrep Academy!