Semgrep

Semgrep finds bugs and security vulnerabilities across 30+ languages, and its Semgrep Assistant can triage findings, write custom rules from a plain-English description, and explain a vulnerability with remediation guidance. It's genuinely fast enough to run in CI without slowing down a build, which is what separates it from heavier static analysis tools.