Table: semgrep_finding

A Semgrep finding is a detailed report or notification generated by the Semgrep static code analysis tool when it detects a problem or anomaly within the source code of a software application. These findings typically include information about the location of the issue within the codebase, a description of the problem, and often a severity rating to help prioritize and address the identified concern.

Examples

List all Semgrep findings

select
  id,
  state,
  repository,
  triage_state,
  severity,
  rule_name
from
  semgrep_finding;

List all Semgrep findings for a specific deployment

select
  id,
  state,
  repository,
  triage_state,
  severity,
  rule_name
from
  semgrep_finding
where
  deployment_slug = 'my-deployment';

List all Semgrep findings with high severity that are not triaged

select
  id,
  state,
  repository,
  triage_state,
  severity,
  rule_name
from
  semgrep_finding
where
  severity = 'high'
  and triage_state = 'untriaged';

List all Semgrep findings with high severity that are not triaged for repository gabrielsoltz/steampipe-plugin-semgrep

select
  id,
  state,
  repository,
  triage_state,
  severity,
  rule_name
from
  semgrep_finding
where
  severity = 'high'
  and triage_state = 'untriaged'
  and repository ->> 'name' = 'gabrielsoltz/steampipe-plugin-semgrep';

Group findings by severity for repository gabrielsoltz/steampipe-plugin-semgrep

select
  count(*) as findings,
  severity
from
  semgrep_finding
where
  repository ->> 'name' = 'gabrielsoltz/steampipe-plugin-semgrep'
group by
  severity;