Rule packs

Curated rule bundles with explicit license, provenance, validation, and fetch paths.

IndexedVerified

Python Security

Python SAST rules aggregated across verified providers.

python

Rules: 416
Downloads: 0
Updated: 2026-06-05

IndexedVerified

JavaScript/TypeScript Security

JavaScript, TypeScript, and Node.js SAST rules aggregated across verified providers.

javascripttypescript

Rules: 361
Downloads: 1
Updated: 2026-06-05

IndexedVerified

C/C++/Rust Security

C, C++, and Rust SAST rules aggregated across verified providers.

ccpprust

Rules: 342
Downloads: 0
Updated: 2026-06-05

IndexedVerified

JVM Security

Java, Kotlin, and Scala SAST rules aggregated across verified providers.

javakotlinscala

Rules: 283
Downloads: 0
Updated: 2026-06-05

IndexedVerified

Go Security

Go SAST rules aggregated across verified providers.

Rules: 223
Downloads: 0
Updated: 2026-06-05

IndexedVerified

PHP Security

PHP SAST rules aggregated across verified providers.

php

Rules: 165
Downloads: 0
Updated: 2026-06-05

IndexedVerified

Config/YAML Security

Generic, YAML, shell, Dockerfile, and CI configuration SAST rules aggregated across verified providers.

bashgenericyaml

Rules: 58
Downloads: 0
Updated: 2026-06-05

IndexedVerified

Node.js Security

Node.js, Express, and Electron SAST rules aggregated across verified providers.

javascripttypescript

Rules: 52
Downloads: 1
Updated: 2026-06-05

IndexedVerified

Ruby Security

Ruby SAST rules aggregated across verified providers.

ruby

Rules: 46
Downloads: 0
Updated: 2026-06-05

IndexedVerified

Python Web Security

Django, Flask, and FastAPI SAST rules aggregated across verified providers.

python

Rules: 28
Downloads: 0
Updated: 2026-06-05

IndexedVerified

.NET Security

C# and .NET SAST rules aggregated across verified providers.

csharp

Rules: 24
Downloads: 0
Updated: 2026-06-05

IndexedVerified

Laravel Security

Laravel SAST rules aggregated across verified providers.

php

Rules: 13
Downloads: 0
Updated: 2026-06-05

IndexedVerified

Go Web Security

Gin and net/http SAST rules aggregated across verified providers.

Rules: 12
Downloads: 0
Updated: 2026-06-05

IndexedVerified

Java/Spring Security

Spring and JVM web SAST rules aggregated across verified providers.

java

Rules: 7
Downloads: 0
Updated: 2026-06-05

Provally CuratedVerified

Provally CVE/1-day Rules

Curated SAST rules generated from CVE and 1-day vulnerability analysis artifacts.

bashcclojurecppcsharpelixirgenericgohtmljavajavascriptkotlinocamlphppythonrubyrustscalaswifttypescriptyaml

Rules: 1450
Downloads: 105
Updated: 2026-06-05

IndexedVerified

GitLab SAST Rules

Redistributable GitLab SAST Semgrep rules indexed from the public GitLab security-products/sast-rules repository, with rule-level license metadata.

ccppcsharpgenericgojavajavascriptkotlinpythonscalaswifttypescript

Rules: 485
Downloads: 94
Updated: 2026-06-05