Semgrep Plugin for IntelliJ-based IDEs

Prerequisites

Semgrep Plugin for IntelliJ-based IDEs communicates with Semgrep command-line interface (CLI) to run scans. Install Semgrep CLI before you can use the IntelliJ Plugin. To install Semgrep CLI:

# For macOS
$ brew install semgrep

# For Ubuntu/WSL/Linux/macOS
$ python3 -m pip install semgrep

# To try Semgrep without installation run via Docker
$ docker run --rm -v "${PWD}:/src" returntocorp/semgrep semgrep

Installation

• Using the IDE built-in plugin system:

  Settings/Preferences > Plugins > Marketplace > Search for " semgrep-intellij" > Install

• Manually:

  Download the latest release and install it manually using Settings/Preferences > Plugins > ⚙️ > Install plugin from disk...

Use full potential of Semgrep

Try Autofix.

Add and update new rules to expand Semgrep extension capabilities.

You can fine-tune and customize rules to improve your scan results:

1. Go to Semgrep Registry. Ensure that you are signed in.
2. Explore the Semgrep Registry, select a rule, and then click Add to Rule Board.
3. Manage rules in the Policies page.

Language support

Semgrep supports 30+ languages.

Support

If you need our support, join the Semgrep community Slack workspace and tell us about any problems you encountered.