This blog post will briefly cover the new Semgrep rules, then go in depth on two lesser-known Semgrep features that were used to create these rules: generic mode and YAML support. Mode Rule ID Rule description Generic container-privileged Found container command with extended privileges Generic container-user-root Found container command running as root Generic curl-insecure Found curl command disabling SSL verification Generic curl-unencrypted-url Found curl command with unencrypted URL (e.g., HTTP, FTP, etc.) Generic gpg-insecure-flags Found gpg command using insecure flags Generic installer-allow-untrusted Found installer command allowing untrusted installations Generic openssl-insecure-flags Found openssl command using insecure flags Generic ssh-disable-host-key-checking Found ssh…