Nat Mote

icon company Semgrep icon location Chelan, WA

Results 93 comments of Nat Mote

C# taint analysis detects static literals as tainted

I appreciate it, but as this is an interprocedural analysis it is part of our Pro offering and not part of Community Edition.

Claude Code fails to connect to Semgrep MCP

You can start claude with `claude --debug` which usually prints useful information in cases like these. If you see any relevant lines please post them here. By the way, we...

[Rust] Closure Prevents Correct URI Taint Propagation

Without the `--pro` or `--pro-intrafile` flags, Semgrep will only perform an intraprocedural analysis. I believe this analysis does not include closures, though I'm not sure. Give this a shot with...