Automic VaultAutomic Vault

brew

Install semgrep with Homebrew, MacPorts, Nix

Easily detect and prevent bugs and anti-patterns in your codebase. Version 1.168.0 via Homebrew; verified 2026-06-25.

install

Additional install commands

macOS

Homebrewverified · 100%
brew install semgrep

local Homebrew formula metadata

MacPortsverified · 94%
sudo port install semgrep

MacPorts ports tree · devel/semgrep/Portfile · source: api.github.com

overview

Package summary

Easily detect and prevent bugs and anti-patterns in your codebase

Commands and aliases

  • pysemgrep
  • semgrep

security posture

Risk level: green

narrow executable package without higher-risk signals.

Risk classifier

green risk · low confidence · appliance

Why

  • narrow executable package without higher-risk signals

Signals

  • metadata:no-higher-risk-signals

Install behavior

  • No Homebrew post-install hook is recorded in formula metadata.
  • Homebrew bottle metadata is available for 6 platform targets.
  • Installs with 12 runtime dependencies.
  • Build metadata lists 3 build dependencies.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

executables

Installed executables

CommandKindExposureNote
pysemgrepcliglobal executable
semgrepcliglobal executable

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-07-08
manager version1.168.0
manager updated2026-06-25
local dataok
upstreamnot checked
latest detectednot detected

https://github.com/semgrep/semgrep

install metadata

Package metadata

Package keybrew:semgrep
Version1.168.0
Package managerHomebrew
Package manager pagehttps://formulae.brew.sh/formula/semgrep
Homepagehttps://semgrep.dev
Repositoryhttps://github.com/semgrep/semgrep
Upstream docshttps://semgrep.dev/docs
LicenseLGPL-2.1-only
Source archivehttps://github.com/semgrep/semgrep.git
Last updated2026-06-25T23:37:03Z
Pulseupdated
Dependenciescertifi, cryptography, dwarfutils, gmp, libev, pcre2, pydantic, python@3.14, rpds-py, sqlite, tree-sitter, zstd
Build dependenciesocaml, opam, pkgconf
Uses from macOScurl
Bottleavailable (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-installnot defined
Servicenone declared

registry facts

Source database details

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namesemgrep
Version Scheme0
Revision0
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Nix95%

semgrep

nix profile install nixpkgs#semgrep
  • normalized package name match
  • Matched by: Semgrep
nixpkgs package indexes · raw.githubusercontent.com · nixpkgs package indexes: semgrep from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix
MacPorts95%

semgrep

sudo port install semgrep
  • normalized package name match
  • Matched by: Semgrep
MacPorts ports tree · api.github.com · MacPorts ports tree: devel/semgrep/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment