Fix Semgrep OSS capability claims: has intra-procedural taint, not just pattern matching

misonijnik · misonijnik · commit df2861486752 · 2026-04-08T15:07:54.000+03:00
diff --git a/src/components/astro/FAQ.astro b/src/components/astro/FAQ.astro
@@ -22,7 +22,7 @@ const faqItems = [
   },
   {
     question: "How does OpenTaint compare to Semgrep?",
-    answer: "Semgrep's open-source engine does pattern matching. Its Pro engine adds taint analysis behind a paid tier. OpenTaint ships full inter-procedural dataflow analysis — cross-endpoint flows, persistence layers, stored injections — under Apache 2.0. Rules use a code-native format that the engine translates into complete taint configurations. Semgrep rule syntax is supported as a migration path.",
+    answer: "Semgrep's open-source engine includes intra-procedural taint analysis — it tracks data within a single function. Its Pro engine adds inter-procedural taint analysis behind a paid tier. OpenTaint ships full inter-procedural dataflow analysis — cross-endpoint flows, persistence layers, stored injections — under Apache 2.0. Rules use a code-native format that the engine translates into complete taint configurations. Semgrep rule syntax is supported as a migration path.",
   },
   {
     question: "How does OpenTaint compare to CodeQL?",

Original file line number	Diff line number	Diff line change
`@@ -22,7 +22,7 @@ const faqItems = [`
`22`	`22`	`},`
`23`	`23`	`{`
`24`	`24`	`question: "How does OpenTaint compare to Semgrep?",`
`25`		`- answer: "Semgrep's open-source engine does pattern matching. Its Pro engine adds taint analysis behind a paid tier. OpenTaint ships full inter-procedural dataflow analysis — cross-endpoint flows, persistence layers, stored injections — under Apache 2.0. Rules use a code-native format that the engine translates into complete taint configurations. Semgrep rule syntax is supported as a migration path.",`
	`25`	`+ answer: "Semgrep's open-source engine includes intra-procedural taint analysis — it tracks data within a single function. Its Pro engine adds inter-procedural taint analysis behind a paid tier. OpenTaint ships full inter-procedural dataflow analysis — cross-endpoint flows, persistence layers, stored injections — under Apache 2.0. Rules use a code-native format that the engine translates into complete taint configurations. Semgrep rule syntax is supported as a migration path.",`
`26`	`26`	`},`
`27`	`27`	`{`
`28`	`28`	`question: "How does OpenTaint compare to CodeQL?",`