Opengrep v1.23.0 released

Opengrep is an open-source static code analysis (SAST) engine - a community-driven alternative to Semgrep, born after Semgrep moved critical scanning features behind a commercial license. It supports inter-procedural and cross-file analysis, SARIF/JSON output, and is backed by a consortium of 10+ appsec organizations. Version v1.23.0 is out with Crystal language support and several bug fixes.

Improvements:
- Crystal language support
- Taint: guarded signatures
- Go: Allow tilde and union in function arguments
- Ast-to-IL: Translate more types of function parameters
- install.sh: add `OPENGREP_SKIP_BINARY_TEST` env var to bypass smoke test

Bug Fixes:
- Fix Windows '..' walk-up in reported file paths
- Clamp out-of-range line reads so truncated files can't abort the scan

New Contributors: @buger, @bchandler-12

Full release notes: github.com/opengrep/opengrep/releases/tag/v1.23.0

• News
• Tools