Rule packs

Curated rule bundles with explicit license, provenance, validation, and fetch paths.

IndexedVerified

Python Security

Python SAST rules aggregated across verified providers.

Python

Rules: 602
Downloads: 4
Updated: 2026-06-29

IndexedVerified

JavaScript/TypeScript Security

JavaScript, TypeScript, and Node.js SAST rules aggregated across verified providers.

JS/TS

Rules: 578
Downloads: 5
Updated: 2026-06-29

IndexedVerified

C/C++/Rust Security

C, C++, and Rust SAST rules aggregated across verified providers.

C++

Rust

Rules: 514
Downloads: 4
Updated: 2026-06-29

IndexedVerified

JVM Security

Java, Kotlin, and Scala SAST rules aggregated across verified providers.

Java

Kotlin

Scala

Rules: 346
Downloads: 2
Updated: 2026-06-29

IndexedVerified

Go Security

Go SAST rules aggregated across verified providers.

Rules: 328
Downloads: 2
Updated: 2026-06-29

IndexedVerified

PHP Security

PHP SAST rules aggregated across verified providers.

PHP

Rules: 292
Downloads: 2
Updated: 2026-06-29

IndexedVerified

Config/YAML Security

Generic, YAML, shell, Dockerfile, and CI configuration SAST rules aggregated across verified providers.

BashGenericjson

YAML

Rules: 93
Downloads: 7
Updated: 2026-06-29

IndexedVerified

Ruby Security

Ruby SAST rules aggregated across verified providers.

Ruby

Rules: 72
Downloads: 2
Updated: 2026-06-29

IndexedVerified

Node.js Security

Node.js, Express, and Electron SAST rules aggregated across verified providers.

JS/TS

Rules: 67
Downloads: 4
Updated: 2026-06-29

IndexedVerified

.NET Security

C# and .NET SAST rules aggregated across verified providers.

Rules: 37
Downloads: 2
Updated: 2026-06-29

IndexedVerified

Python Web Security

Django, Flask, and FastAPI SAST rules aggregated across verified providers.

Python

Rules: 34
Downloads: 2
Updated: 2026-06-29

IndexedVerified

Laravel Security

Laravel SAST rules aggregated across verified providers.

PHP

Rules: 15
Downloads: 2
Updated: 2026-06-29

IndexedVerified

Go Web Security

Gin and net/http SAST rules aggregated across verified providers.

Rules: 12
Downloads: 2
Updated: 2026-06-29

IndexedVerified

Java/Spring Security

Spring and JVM web SAST rules aggregated across verified providers.

Java

Rules: 9
Downloads: 2
Updated: 2026-06-29

Provally CuratedVerified

Provally CVE/1-day Rules

Curated SAST rules generated from CVE and 1-day vulnerability analysis artifacts.

Bash

Clojure

C++

ElixirGeneric

HTML

Java

JS/TSjson

Kotlinlua

OCaml

PHP

Python

Ruby

Rust

Scala

Swiftxml

YAML

Rules: 2424
Downloads: 1210
Updated: 2026-06-23

IndexedVerified

GitLab SAST Rules

Redistributable GitLab SAST Semgrep rules indexed from the public GitLab security-products/sast-rules repository, with rule-level license metadata.

C++

C#Generic

Java

JS/TS

Kotlin

Python

Scala

Swift

Rules: 484
Downloads: 1195
Updated: 2026-06-29