Semgrep Blog

An extensible developer-friendly application security platform that scans source code to surface true and actionable security issues with AI-assisted SAST, SCA, and Secrets Detection solutions.

Popular posts: 4
Total points: 2,353
HN comments: 736
Rank: #518 company

Visit semgrep.dev → On Hacker News Mar 2025 – Jun 2026

Security & Privacy 4 AI & Machine Learning 2 Software Engineering 1 Open Source 1

Most points Most discussed Most cited Newest

Popular GitHub Action tj-actions/changed-files is compromised

2025282 points4 comments Security & Privacy details

Popular GitHub Action tj-actions/changed-files has been compromised with a payload that appears to attempt to dump secrets, impacting thousands of CI pipelines.