User Reviews of Semgrep

I have consistently observed that their scan time is an issue for mono repos. Sometimes with their AI-based scanning, when you triage that scan, the scan never completes or finishes(, which makes it difficult. Another consistent issue is that whenever you have a new repo to onboard to the platform, the tool ideally should detect the master...

Regarding improvements for Semgrep, I have noticed that it occasionally provides false positive results, although it does not happen consistently. That is the only major improvement I can think of, aside from the fact that the pricing is reasonable. It performs well; I only wish it could fine-tune the rules to reduce false positives....