tool · inferred from evidence
semgrep
A static analysis tool mentioned as being installed via setup.py.
- Semgrep confusing Timeout error on rules with too many matches max_match_per_file
Raise the per-file match ceiling via the engine env var: `export SEMGREP_CORE_EXTRA="-max_match_per_file 200000"` and set the scan timeout to 0 (unlimited) if your pipeline allows it. The reporter confirmed this combination got their scan t
- Semgrep cannot invoke on ARM aarch64 Android Termux
Semgrep now ships ARM support: multi-arch Docker images (linux/amd64 + linux/arm64) since 1.31.2, aarch64 Python wheels on PyPI since 1.33.1, and musllinux (Alpine) aarch64 wheels since 1.38.0. Upgrade to 1.38.0 or later on ARM, for Docker
- Semgrep setup.py install throws exception pip install semgrep 0.31.1
Fixed in semgrep 0.37.0: the setup.py no longer depends on the `wheel` package unless you are explicitly building wheels. Upgrade to 0.37.0 or later and the setup.py install path works. (The Gentoo ebuild maintainers also confirmed that the