What problem does it solve? Running comprehensive Semgrep security scans across multi-language codebases requires manual ruleset selection, sequential execution, and fragmented result handling, which slows down security audits and misses cross-file vulnerabilities. ## Core Features & Use Cases - Parallel Multi-Language Scanning: Detects languages automatically and spawns concurrent scanner subagents per language category, merging all output into a single SARIF report. - Two Scan Modes: Choose "run all" for full ruleset coverage or "important only" for high-confidence security vulnerabilities filtered by severity, confidence, and impact metadata. - Semgrep Pro Detection: Automatically checks for Semgrep Pro to enable cross-file taint analysis, and includes third-party rulesets (Trail of Bits, 0xdea, Decurity) that catch vulnerabilities absent from the official registry. - Use Case: Before a code review of a Python/React application, run a full security audit that scans with Django and React rulesets plus Trail of Bits rules, then receive a merged SARIF file with findings broken down by severity and category. ## Quick Start Ask the AI to scan your codebase for security vulnerabilities with Semgrep and approve the proposed scan plan when prompted.
