Semgrep Rule Authoring
devsecops · medium · +40 XP
Target
GET /api/lab/semgrep-101/codebase (10 Python files; 3 contain eval(), 7 don't)
POST /api/lab/semgrep-101/submit body {rule_yaml} (must match all 3 vulns, 0 FPs)
Goal: write a Semgrep rule that catches eval($X) — across 10 sample files. Score = 3 TP, 0 FP. Anything less fails. Mini-engine supports pattern: eval($X) and similar.
// AI hint · first is free · then 1 credit or 5 XP
// attack console
/api/lab/semgrep-101/
// reuse on the cli
// submit flag
// no solves yet
// start of devsecops
next
SBOM Generation & Verification
1 of 12 · devsecops