tool · inferred from evidence
semgrep
A static analysis tool mentioned as being installed via setup.py.
- Semgrep confusing Timeout error on rules with too many matches max_match_per_file
Semgrep times out scanning a small (~6K lines) JS file in Azure Pipelines PR analysis, with a confusing "Timeout" error. The real cause is a rule producing too many matches, not a slow scan. Increasing the timeout alone does not help.
- Semgrep cannot invoke on ARM aarch64 Android Termux
Semgrep installs on ARM (e.g. an Android tablet via Termux, or aarch64 Linux) but cannot be invoked, the bundled OCaml binary is x86-64 only, so it fails on ARM systems.
- Semgrep setup.py install throws exception pip install semgrep 0.31.1
Installing semgrep via `python setup.py install` (e.g. as a dependency of Mobile-Security-Framework-MobSF) throws a traceback during the install: the setup.py unconditionally depends on the `wheel` package, which fails in environments where