Pull request overview

This pull request migrates the documentation from Semgrep to Opengrep following licensing changes to Semgrep. Opengrep is an open-source fork of the Semgrep engine that Codacy is adopting as a 1:1 replacement. The PR updates tool references, URLs, and adds release notes explaining the migration while preserving backward compatibility through unchanged configuration file names.

Changes:

• Added release notes documenting the Semgrep to Opengrep migration
• Updated all tool name references from "Semgrep" to "Opengrep" across documentation files
• Updated repository URLs from codacy/codacy-semgrep to codacy/codacy-opengrep and external links from semgrep.dev to github.com/opengrep/opengrep
• Removed Semgrep Pro references from footnotes and updated anchor references from #semgrep to #opengrep
• Updated vocabulary file to include Opengrep and remove Semgrep

Reviewed changes

Copilot reviewed 8 out of 8 changed files in this pull request and generated 2 comments.

The following names are **deprecated** and shouldn't be used, although they're still accepted in the Codacy configuration file:

-   `bundleraudit` - The tool **bundler-audit** [is deprecated](../release-notes/cloud/cloud-2023-10-13-bundler-audit-deprecation.md). If you are using **Opengrep** or **Trivy** instead, use the names `trivy` or `opengrep`.
-   `csslint` - The tool **CSSLint** [is deprecated](../release-notes/cloud/cloud-2023-10-25-csslint-jshint-fauxpas-tailor-tslint-deprecation.md). If you are using **Stylelint** instead, use the name `stylelint`.
-   `eslint` - Use the name `eslint-8` for **ESLint**.
-   `jshint`, `tslint` - The tools **JSHint** and **TSLint** [are deprecated](../release-notes/cloud/cloud-2023-10-25-csslint-jshint-fauxpas-tailor-tslint-deprecation.md). If you are using **ESLint** instead, use the name `eslint-8`.
-   `pylint` - Use the name `pylintpython3` for **Pylint**.
-   `tailor` - The tool **Tailor** [is deprecated](../release-notes/cloud/cloud-2023-10-25-csslint-jshint-fauxpas-tailor-tslint-deprecation.md). If you are using **SwiftLint** instead, use the name `swiftlint`.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Pull Request Overview

The PR successfully updates the documentation for the Semgrep to Opengrep migration. It is generally up to standards. I have identified some inconsistencies where Opengrep was added to the main supported tools table but missed in the 'Languages checked for security issues' table for specific languages (AWS CloudFormation, Helm, Kubernetes). There are also minor grammatical and formatting nitpicks in the new release notes and footnote spacing.

Test plan proposal

• Verify that the Opengrep GitHub links (https://github.com/opengrep/opengrep/) are valid and resolve correctly.
• Confirm that footnote references (e.g., <sup>1</sup>) correctly navigate to the intended span IDs on each page where they were updated.
• Ensure that the new release note file is correctly indexed and accessible from the main release notes index page.
• Audit the 'Security and risk management' table to ensure Opengrep is present for all languages listed in the 'Supported tools' main table.

About this PR

• The description is sufficient for context given the Jira key, but consider adding a brief summary of the migration (forking of Semgrep) to the description for clarity in the git history.

💡 Codacy uses AI. Check for mistakes.