Open-source pattern-based static analysis—lightweight rules in YAML; Semgrep Assistant layers AI triage and auto-fix suggestions.
Semgrep is popular for custom rules enforcing team conventions or security policy. Semgrep Assistant adds LLM-based explanation and remediation.