Skip to content
gspotDocs

security

Unsafe code patterns in every file that a language configuration covers. The Security and secrets guide explains the setup.

Checks

Section titled “Checks”
Check Stage Level What it does
security/semgrep push recommended Runs the Semgrep packs of each configuration, and the repository rules, over changed files.
security/semgrep-registry manual recommended Downloads and runs the public Semgrep packs in tools.semgrep.registry_packs.

Settings

Section titled “Settings”
Setting What it sets
tools.semgrep.registry_packs The registry packs the manual registry check runs.
tools.semgrep.rule_files Rule files or folders of the repository that Semgrep runs beside the shipped packs.

Selected when

Section titled “Selected when”

Always selected.

Rules for coding agents

Section titled “Rules for coding agents”
Rule file Installed when
.gspot/configurations/general/security/rules/SECURITY.md Always

Tools and versions

Section titled “Tools and versions”
Tool Version
semgrep 1.178.0