Drew Dennison – Security should make the computer sweat more

Drew Dennison is the CTO & co-founder of r2c, a startup working to profoundly improve software security and reliability to safeguard human progress. Drew joins us to introduce a tool called semgrep. Semgrep is a fast source code analysis tool, potentially faster than anything you've seen before. Drew Dennison is the CTO and co-founder of R2C, a startup working to profoundly improve software security and reliability to safeguard human progress. If you want to see the live demo Drew does of Semgrep, head over to the Application Security Podcast YouTube channel to see the video. We hope you enjoy this conversation with Drew Dennison. At Security Journey, we believe security is every developer's job.The Application Security Podcast is brought to you by Security Journey.About Security JourneyDrew Dennison is the CTO and co-founder of R2C, a startup working to profoundly improve software security and reliability to safeguard human progress.→ Learn more about Security JourneyConnect with Drew Dennison:→ Semgrep→ r2c / Semgrep Inc.Mentioned in this episode:→ Semgrep→ r2c / Semgrep Inc.→ Applied Cryptography→ Ron Rivest→ John Nash's Declassified NSA Letters→ Hack (programming language)→ Flow→ nodejsscan→ Yoann Padioleau→ Applied Cryptography→ Hacking Exposed Web Applications→ Tree-sitterFollow the Application Security Podcast:➜ Home➜ X➜ LinkedIn➜ YouTube➜ Instagram➜ FacebookChapters:00:00 Meet Drew Dennison: Drew Dennison – Security should make the computer sweat more01:42 All right, so the topic for today is something called Semgrep07:24 I'm trying to think. You spoke about this tool, I think12:22 This a replacement or a— I mean, is this designed to15:21 Yeah. I mean, that's the whole DevOps approach to the world18:09 Really neat way. So, GitHub Action pipelines— what other use cases21:03 Yeah, you have patterns that still match certain code constructs as22:16 That's very cool, that example you had earlier there about the24:43 You're running Semgrep against anything you're building, so good luck. They're27:58 If you had to leave our audience with one kind of