Drew Dennison – Security should make the computer sweat more

Drew Dennison is the CTO & co-founder of r2c, a startup working to profoundly improve software security and reliability to safeguard human progress. Drew joins us to introduce a tool called semgrep. Semgrep is a fast source code analysis tool, potentially faster than anything you've seen before. Drew Dennison is the CTO and co-founder of R2C, a startup working to profoundly improve software security and reliability to safeguard human progress. If you want to see the live demo Drew does of Semgrep, head over to the Application Security Podcast YouTube channel to see the video. We hope you enjoy this conversation with Drew Dennison. At Security Journey, we believe security is every developer's job.

The Application Security Podcast is brought to you by Security Journey.

About Security Journey
Drew Dennison is the CTO and co-founder of R2C, a startup working to profoundly improve software security and reliability to safeguard human progress.
→ Learn more about Security Journey

Connect with Drew Dennison:
→ Semgrep
→ r2c / Semgrep Inc.

Mentioned in this episode:
→ Semgrep
→ r2c / Semgrep Inc.
→ Applied Cryptography
→ Ron Rivest
→ John Nash's Declassified NSA Letters
→ Hack (programming language)
→ Flow
→ nodejsscan
→ Yoann Padioleau
→ Applied Cryptography
→ Hacking Exposed Web Applications
→ Tree-sitter

Follow the Application Security Podcast:
➜ Home
➜ X
➜ LinkedIn
➜ YouTube
➜ Instagram
➜ Facebook

Chapters:
00:00 Meet Drew Dennison: Drew Dennison – Security should make the computer sweat more
01:42 All right, so the topic for today is something called Semgrep
07:24 I'm trying to think. You spoke about this tool, I think
12:22 This a replacement or a— I mean, is this designed to
15:21 Yeah. I mean, that's the whole DevOps approach to the world
18:09 Really neat way. So, GitHub Action pipelines— what other use cases
21:03 Yeah, you have patterns that still match certain code constructs as
22:16 That's very cool, that example you had earlier there about the
24:43 You're running Semgrep against anything you're building, so good luck. They're
27:58 If you had to leave our audience with one kind of