Opengrep v2.0.0 released

Opengrep is the open source SAST scanner forked from Semgrep.

The major release v2.0.0 is here. The biggest change: Python is gone from the codebase, so the CLI no longer depends on it. New headline features are interfile taint analysis (enabled per rule via --enable-interfile), skins with a progress bar, and rule downloads through an HTTP proxy.

Language support got a big boost as well. Some highlights:

Ruby and Crystal: heredocs, last-expression returns, yield, taint through instance variables
Python: PEP 695 type aliases and PEP 758 unparenthesized except-tuples
Scala 3 support
TypeScript: .mts and .cts extensions, Flow syntax in JavaScript files
ASP.NET: .ashx and .asmx files
PHP: better matching
Taint analysis: dataflow traces as trees
Windows: --test works now

The release also contains many engine fixes, CI updates and six new contributors, so check the full list on the release page.

Full release notes: v2.0.0

Happy scanning! :)

• News
• Tools