Vigilance vs Semgrep
Semgrep. Reads source code and finds mistakes in it, using rules you can write yourself.
Vigilance. Does not read code for mistakes. It compares two versions and says what the new one can do.
Side by side
| Question | Semgrep | Vigilance |
|---|---|---|
| Finds a mistake in your own source code | Yes | No |
| Lets you write your own rules | Yes | No, there is nothing to set up |
| Covers a program with no source code | No | Yes |
| Covers a container or a zip | No | Yes |
| Spots a new file that runs itself during an install | Only if a rule matches | Yes |
| Watches a computer that is already running | No | Yes |
Which one do you need?
Different jobs, and this is the honest line. Semgrep finds mistakes in code. Vigilance finds the file that arrived and can now act.
Try it on your own software.
Show it the version you run today and the one you are about to install.