semgrep

Utils

Updated yesterday

Versions

Browse available versions organized by version lines.

Line latest

16 versions·End of life date is unavailable

Updated

version

Pull URL

vulnerabilities

exploitability

Compressed size

Updated yesterday

1.177.0

Vulnerabilities

Exploitability-

Compressed size222.15 MB

1.177.0 dev

Vulnerabilities

Exploitability-

Compressed size222.77 MB

Updated Sep 10, 2026

1.176.0

Vulnerabilities

Exploitability-

Compressed size221.95 MB

1.176.0 dev

Vulnerabilities

Exploitability-

Compressed size222.55 MB

Updated Sep 01, 2026

1.175.0

Vulnerabilities

2841

Exploitability-

Compressed size221.76 MB

1.175.0 dev

Vulnerabilities

2841

Exploitability-

Compressed size222.37 MB

Updated Aug 25, 2026

1.174.0

Vulnerabilities

21272

Exploitability-

Compressed size220.21 MB

1.174.0 dev

Vulnerabilities

21272

Exploitability-

Compressed size220.81 MB

Updated Aug 18, 2026

1.173.0

Vulnerabilities

41982

Exploitability-

Compressed size220.24 MB

1.173.0 dev

Vulnerabilities

41982

Exploitability-

Compressed size220.88 MB

Updated Aug 13, 2026

1.172.0

Vulnerabilities

429112

Exploitability-

Compressed size221.04 MB

1.172.0 dev

Vulnerabilities

429112

Exploitability-

Compressed size221.64 MB

Updated Jul 27, 2026

1.171.0

Vulnerabilities

437226

Exploitability-

Compressed size222.03 MB

1.171.0 dev

Vulnerabilities

437226

Exploitability-

Compressed size222.64 MB

Updated Jul 21, 2026

1.170.0

Vulnerabilities

537236

Exploitability-

Compressed size281.40 MB

1.170.0 dev

Vulnerabilities

537236

Exploitability-

Compressed size282.02 MB

semgrep 1.172.0

Updated on August 13·

221.04 MB / 224.42 MB

Vulnerabilities

429112

Prerequisites

Before you begin, install the following tools locally:

cosign download attestation \
 --predicate-type=https://spdx.dev/Document \
 --platform linux/arm64 \
 reg.mini.dev/semgrep:latest | jq '.payload | @base64d |
fromjson | .predicate'

amd64arm64

Open source licenses

Each image in this registry contains open source software components subject to their respective open source licenses. A list of included licenses is available in the SBOM for each image. Copyright in those components belongs to their respective authors and contributors. Minimus claims no copyright ownership over third-party components. For copyright and attribution information for any included component, refer to the relevant upstream project repository.

Package	version	license
bash	5.3-r4	GPL-3.0-or-later
busybox	1.38.0-r1	GPL-2.0-only
ca-certificates-bundle	20260611-r0	MPL-2.0 AND MIT
coreutils	9.11-r0	GPL-3.0-or-later
curl	8.21.0-r1	MIT
cyrus-sasl	2.1.28-r3	BSD-3-Clause
findutils	4.11.0-r0	GPL-3.0-or-later
gawk	5.4.1-r1	GPL-3.0-or-later
gdbm	1.26-r1	GPL-3.0-or-later
git	2.55.0-r0	GPL-2.0-or-later
git-lfs	3.7.1-r11	MIT
glibc	2.44-r0	LGPL-2.1-or-later
glibc-locale-posix	2.44-r0	LGPL-2.1-or-later
gmp	6.3.0-r3	LGPL-3.0-or-later OR GPL-2.0-or-later
gnutar	1.35-r6	GPL-3.0-or-later
gnutar-rmt	1.35-r6	GPL-3.0-or-later
grep	3.12-r1	GPL-3.0-or-later
heimdal-libs	7.8.0-r2	BSD-3-Clause
jq	1.8.2-r0	MIT
keyutils-libs	1.6.3-r2	GPL-2.0-or-later OR LGPL-2.0-or-later