Off the Bit
Tools: Semgrep
Category: Testing and code quality
Site: semgrep.dev
Semgrep
Static analysis with rules that look like the code they match, so a team can write its own checks in an afternoon.
Custom rules you can actually read.
What it is sold for
Enforcing security and correctness patterns in source.
Same shelf
The rest of testing and code quality, alphabetically. Sharing a category is a filing decision, not a relationship.
- Scans public repositories and reports how much of the code looks machine-generated.
- Amazon's automated review service. The address now serves CodeGuru Profiler, which is about runtime cost rather than review.
- Visual regression testing. Compares rendered screenshots rather than the DOM, so a layout that moves is caught even when the markup did not change.
- Test automation aimed at quality teams rather than at engineers, with tests authored and maintained without code.
- Mock API endpoints created in seconds, generated from a prompt or from captured traffic, across REST, GraphQL and gRPC.
- Records real Java runtime behaviour and turns it into regression tests and review verdicts.
- Continuous profiling for PHP and other runtimes, aimed at finding the slow function rather than the slow request.
- Generates, runs and maintains end-to-end tests automatically, and claims to resolve most of its own failures.
ImranTools[Semgrep]