Tamp.OpenGrep
Tamp CommandPlan wrapper for the `opengrep` CLI. Pattern-based SAST scanner forked from Semgrep with cleaner licensing (multi-vendor governance, no Pro paywall). Defaults to SARIF output because the Wave 1 chain (DefectDojo) consumes SARIF. Unpinned name (no .V{N} suffix) per ADR 0002 — OpenGrep was forked at 1.x with no prior 0.x to break compat with, and the project is committed to surface stability; if a future major breaks the wrapper this will be re-pinned as Tamp.OpenGrep.VN.
View on Github
Activity
- Latest release
- 3mo ago
- Total releases
- 2
- Cadence
- ~6 days
- Last 12 months
- 2
Reach
- Stars
- —
Details
- License
- MIT
- First release
- May 19, 2026
Releases
| Version | Released | |
|---|---|---|
1.11.2
patch
| ||
1.11.1
initial
|