Rule packs

Curated rule bundles with explicit license, provenance, validation, and fetch paths.

IndexedVerified

Python Security

Python SAST rules aggregated across verified providers.

Python

Rules: 972
Downloads: 4
Updated: 2026-09-02

IndexedVerified

JavaScript/TypeScript Security

JavaScript, TypeScript, and Node.js SAST rules aggregated across verified providers.

JS/TS

Rules: 835
Downloads: 1
Updated: 2026-09-02

IndexedVerified

C/C++/Rust Security

C, C++, and Rust SAST rules aggregated across verified providers.

C++

Rust

Rules: 818
Downloads: 0
Updated: 2026-09-02

IndexedVerified

Go Security

Go SAST rules aggregated across verified providers.

Rules: 568
Downloads: 0
Updated: 2026-09-02

IndexedVerified

JVM Security

Java, Kotlin, and Scala SAST rules aggregated across verified providers.

Java

Kotlin

Scala

Rules: 567
Downloads: 1
Updated: 2026-09-02

IndexedVerified

PHP Security

PHP SAST rules aggregated across verified providers.

PHP

Rules: 554
Downloads: 0
Updated: 2026-09-02

IndexedVerified

Config/YAML Security

Generic, YAML, shell, Dockerfile, and CI configuration SAST rules aggregated across verified providers.

BashGenericjson

YAML

Rules: 182
Downloads: 2
Updated: 2026-09-02

IndexedVerified

Ruby Security

Ruby SAST rules aggregated across verified providers.

Ruby

Rules: 108
Downloads: 0
Updated: 2026-09-02

IndexedVerified

Node.js Security

Node.js, Express, and Electron SAST rules aggregated across verified providers.

JS/TS

Rules: 91
Downloads: 1
Updated: 2026-09-02

IndexedVerified

.NET Security

C# and .NET SAST rules aggregated across verified providers.

Rules: 60
Downloads: 0
Updated: 2026-09-02

IndexedVerified

Python Web Security

Django, Flask, and FastAPI SAST rules aggregated across verified providers.

Python

Rules: 53
Downloads: 0
Updated: 2026-09-02

IndexedVerified

Laravel Security

Laravel SAST rules aggregated across verified providers.

PHP

Rules: 22
Downloads: 0
Updated: 2026-09-02

IndexedVerified

Java/Spring Security

Spring and JVM web SAST rules aggregated across verified providers.

Java

Rules: 15
Downloads: 1
Updated: 2026-09-02

IndexedVerified

Go Web Security

Gin and net/http SAST rules aggregated across verified providers.

Rules: 12
Downloads: 0
Updated: 2026-09-02

Provally CuratedVerified

Provally CVE/1-day Rules

Curated SAST rules generated from CVE and 1-day vulnerability analysis artifacts.

Bash

Clojure

C++

C#dart

ElixirGeneric

HTML

Java

JS/TSjson

Kotlinlua

OCaml

PHP

Python

Ruby

Rust

Scala

Swiftxml

YAML

Rules: 4313
Downloads: 2316
Updated: 2026-09-02

IndexedVerified

GitLab SAST Rules

Redistributable GitLab SAST Semgrep rules indexed from the public GitLab security-products/sast-rules repository, with rule-level license metadata.

C++

C#Generic

Java

JS/TS

Kotlin

Python

Scala

Swift

Rules: 484
Downloads: 2298
Updated: 2026-06-29