Semgrep’s Rebranding Blunder: Opengrep Rises to Save True Open Source!
Semgrep has rebranded its OSS static application security testing tool as Semgrep Community Edition, shifting away from open source principles. In response, a new consortium-backed fork, Opengrep, emerges to maintain a genuine OSS SAST tool, with backing from multiple security vendors. Opengrep promises enhanced scanning, improved rules, and vendor independence.
Hot Take:
In the ever-twisting saga of tech tools, Semgrep just pulled a name switcheroo, leaving the open-source party and strutting into the glitzy world of commercialism. But fear not, here comes Opengrep, riding in on a white horse, ready to save the day and the developer community from a fate worse than a 404 error!
Key Points:
- Semgrep rebranded its OSS tool to Semgrep Community Edition and moved some features to its commercial offerings.
- Key features such as tracking ignores, fingerprinting, and meta-variables are now exclusive to Semgrep’s SaaS platform.
- Opengrep, backed by over ten security vendors, emerges as a true OSS alternative to Semgrep.
- Opengrep offers a more capable scanning engine, backward compatibility, and long-term assurance of community rules.
- Endor Labs highlights the importance of maintaining a standardized, open-source SAST engine for all.
Already a member? Log in here