docs: Add Semgrep security scanning guide #175

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Open

gabrielanhaia wants to merge 1 commit into main from docs/semgrep-security-guide

Member

gabrielanhaia commented Jan 8, 2026

What?

Add comprehensive documentation for the Semgrep security scanning workflow.

Why?

Provide developers with a single reference for:

Understanding common security findings
How to fix vulnerabilities
Running Semgrep locally
Ignoring false positives

What's Included

File	Purpose
`docs/security/semgrep.md`	Full guide with examples
`README.md`	Link to the new docs

Contents

Common findings and fixes (SQL injection, command injection, hardcoded secrets, etc.)
Language-specific examples (Kotlin/Java, PHP)
Local setup instructions
How to ignore false positives
CI behavior explanation


          docs: Add Semgrep security scanning guide

d84686b

Add comprehensive documentation for Semgrep security scanning:
- Common findings and fixes for Kotlin/Java and PHP
- Local setup instructions
- How to ignore false positives
- CI behavior explanation

gabrielanhaia marked this pull request as ready for review

January 8, 2026 15:53

gabrielanhaia self-assigned this

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet