UNPKG

mcp-server-semgrep

Version:

MCP Server for Semgrep Integration - static code analysis with AI

github.com/Szowesgad/mcp-server-semgrep

Szowesgad/mcp-server-semgrep

137 lines (98 loc) • 10.8 kB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
For a rule to be included as high signal, it has to: have `confidence: HIGH` in the metadata OR \(be a taint mode rule AND cannot be an audit rule\). Data about high signal repos can be generated using the `matrixify.py` script with the `-hs` argument. ## html | | html | |:----------------------|-------:| | Unmapped Metacategory | 1 | ## csharp | | .net | mvc | xml | razor | asp | |:----------------------|-------:|------:|------:|--------:|------:| | Unmapped Metacategory | 2 | 0 | 0 | 0 | 0 | | Path Traversal | 1 | 0 | 0 | 0 | 0 | | CSRF | 1 | 1 | 0 | 0 | 0 | | Deserialization | 7 | 0 | 0 | 0 | 0 | | XXE | 3 | 0 | 3 | 0 | 0 | | Code Injection | 1 | 0 | 0 | 1 | 1 | ## ruby | | ruby | rails | md5 | aws-lambda | mysql2 | active-record | postgres | pg | sequel | |:----------------------|-------:|--------:|------:|-------------:|---------:|----------------:|-----------:|-----:|---------:| | Regex | 1 | 1 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | | Path Traversal | 3 | 3 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | | Deserialization | 1 | 0 | 0 | 1 | 0 | 0 | 0 | 0 | 0 | | Open Redirect | 1 | 1 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | | Unmapped Metacategory | 2 | 1 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | | SQL Injection | 1 | 2 | 0 | 5 | 1 | 1 | 1 | 1 | 1 | | Code Injection | 2 | 2 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | | XSS | 0 | 2 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | | Cryptography | 0 | 0 | 1 | 0 | 0 | 0 | 0 | 0 | 0 | ## go | | go | grpc | jwt | md5 | aws-lambda | database | sql | |:----------------------|-----:|-------:|------:|------:|-------------:|-----------:|------:| | Unmapped Metacategory | 1 | 0 | 0 | 0 | 0 | 0 | 0 | | Path Traversal | 1 | 0 | 0 | 0 | 0 | 0 | 0 | | Cryptography | 3 | 2 | 1 | 1 | 0 | 0 | 0 | | XSS | 1 | 0 | 0 | 0 | 0 | 0 | 0 | | SQL Injection | 1 | 0 | 0 | 0 | 2 | 1 | 1 | | SSRF | 1 | 0 | 0 | 0 | 0 | 0 | 0 | ## java | | java | spring | jwt | aws-lambda | sql | |:----------------------|-------:|---------:|------:|-------------:|------:| | Path Traversal | 1 | 0 | 0 | 0 | 0 | | Unmapped Metacategory | 1 | 1 | 0 | 0 | 0 | | Command Injection | 1 | 1 | 0 | 0 | 0 | | XSS | 1 | 1 | 0 | 0 | 0 | | SQL Injection | 1 | 1 | 0 | 2 | 1 | | SSRF | 1 | 1 | 0 | 0 | 0 | | Cryptography | 0 | 0 | 2 | 0 | 0 | ## php | | md5 | php | laravel | |:----------------|------:|------:|----------:| | Cryptography | 1 | 0 | 0 | | Code Injection | 0 | 1 | 0 | | Deserialization | 0 | 1 | 0 | | SQL Injection | 0 | 3 | 3 | | SSRF | 0 | 2 | 0 | ## javascript | | express | javascript | aws-lambda | mysql | mysql2 | sequelize | postgres | pg | knex | dynamodb | argon2 | cryptography | typescript | pug | jade | dot | ejs | nunjucks | lodash | handlbars | mustache | hogan.js | eta | squirrelly | angularjs | angular | |:----------------------|----------:|-------------:|-------------:|--------:|---------:|------------:|-----------:|-----:|-------:|-----------:|---------:|---------------:|-------------:|------:|-------:|------:|------:|-----------:|---------:|------------:|-----------:|-----------:|------:|-------------:|------------:|----------:| | Unmapped Metacategory | 3 | 2 | 1 | 0 | 0 | 0 | 0 | 0 | 0 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 1 | 2 | 1 | | XXE | 1 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | | SQL Injection | 1 | 0 | 5 | 1 | 1 | 1 | 1 | 1 | 1 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | | Prototype Pollution | 1 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | | SSRF | 1 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | | Code Injection | 3 | 2 | 2 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | | Open Redirect | 0 | 1 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | | Command Injection | 0 | 1 | 1 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | | XSS | 0 | 0 | 2 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | ## scala | | scala | sbt | jwt | cryptography | play | slick | scala-js | |:----------------------|--------:|------:|------:|---------------:|-------:|--------:|-----------:| | Active Debug Code | 1 | 1 | 0 | 0 | 0 | 0 | 0 | | XXE | 3 | 0 | 0 | 0 | 0 | 0 | 0 | | Cryptography | 1 | 0 | 0 | 1 | 0 | 0 | 0 | | XSS | 1 | 0 | 0 | 0 | 1 | 0 | 0 | | SQL Injection | 2 | 0 | 0 | 0 | 2 | 1 | 0 | | Code Injection | 1 | 0 | 0 | 0 | 0 | 0 | 1 | | Unmapped Metacategory | 0 | 0 | 1 | 0 | 0 | 0 | 0 | ## python | | python | aws-lambda | flask | django | pyramid | sqlalchemy | pymssql | mysql | pymysql | psycopg | psycopg2 | boto3 | dynamodb | |:----------------------|---------:|-------------:|--------:|---------:|----------:|-------------:|----------:|--------:|----------:|----------:|-----------:|--------:|-----------:| | Deserialization | 1 | 1 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | | Command Injection | 6 | 4 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | | Unmapped Metacategory | 1 | 1 | 1 | 1 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 1 | 1 | | Code Injection | 1 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | | XSS | 0 | 2 | 1 | 1 | 1 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | | SQL Injection | 0 | 6 | 1 | 1 | 1 | 2 | 1 | 1 | 1 | 1 | 1 | 0 | 0 | | SSRF | 0 | 0 | 2 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | 0 | ## bash | | bash | curl | |:---------------|-------:|-------:| | Code Injection | 1 | 1 | ## c | | c | |:----------------------|----:| | Unmapped Metacategory | 3 | ## generic | | nginx | |:----------------------|--------:| | Unmapped Metacategory | 4 |