IndexedVerified

GitLab SAST Rules

Redistributable GitLab SAST Semgrep rules indexed from the public GitLab security-products/sast-rules repository, with rule-level license metadata.

Fetch pack

greprules pack fetch gitlab-sast-rules --engine opengrep

curl https://api.greprules.io/api/packs/gitlab-sast-rules.tar.gz -o gitlab-sast-rules.tar.gz

Owner: GitLab Security Products
Total rules: 484
Downloads: 1196
Last updated: 2026-06-29
Languages: CC++C#GenericGoJavaJS/TSKotlinPythonScalaSwift

Included rules

Memory Integer Overflowgitlab-sast-go-memory-rule-integer-overflowCookie RequestParamToCookiegitlab-sast-scala-cookie-rule-requestparamtocookiePassword ConstantDBPasswordgitlab-sast-scala-password-rule-constantdbpasswordSsl Req No Certvalidgitlab-sast-python-ssl-rule-req-no-certvalidSsrf SSRFgitlab-sast-java-ssrf-rule-ssrfPassword HardcodePasswordgitlab-sast-scala-password-rule-hardcodepasswordLeak Pprof Endpointgitlab-sast-go-leak-rule-pprof-endpointTelnet Import Telnibgitlab-sast-python-telnet-rule-import-telnibCrypto Import Pycryptogitlab-sast-python-crypto-rule-import-pycryptoXxe Documentgitlab-sast-scala-xxe-rule-documentSmtp SmtpClientgitlab-sast-java-smtp-rule-smtpclientSsl Ssl With Bad Versiongitlab-sast-python-ssl-rule-ssl-with-bad-versionCookie RequestParamToHeadergitlab-sast-scala-cookie-rule-requestparamtoheaderXxe XMLRdrgitlab-sast-java-xxe-rule-xmlrdrStrings FormatStringManipulationgitlab-sast-rules-lgpl-kotlin-strings-rule-formatstringmanipulationInject FileDisclosureRequestDispatchergitlab-sast-java-inject-rule-filedisclosurerequestdispatcherCors PermissiveCORSInjectiongitlab-sast-scala-cors-rule-permissivecorsinjectionFormat Snprintf Vsnprintfgitlab-sast-c-format-rule-snprintf-vsnprintfEval Vm Runinnewcontext Injectiongitlab-sast-rules-lgpl-javascript-eval-rule-vm-runinnewcontext-injectionCrypto CipherIntegritygitlab-sast-rules-lgpl-kotlin-crypto-rule-cipherintegrityRace Chmodgitlab-sast-c-race-rule-chmodEval Yaml Deserializegitlab-sast-rules-lgpl-javascript-eval-rule-yaml-deserializeScript ScriptInjectiongitlab-sast-scala-script-rule-scriptinjectionXxe SaxParserXXEgitlab-sast-scala-xxe-rule-saxparserxxe

24 of 484 loaded