10 Code Search Tricks for Open Source Contributors and Maintainers
summary
A practical walkthrough of 10 search tricks using Sourcegraph Cloud shows concrete queries: file filters for CONTRIBUTING.md and composer.json to find welcoming projects, repo: and file: searches that list thousands of repos using a dependency, regex and structural searches that find instantiations or deprecated calls like mhash, audits for exposed keys and compromised packages (many projects fixed the package but stale logs remain), and a VS Code extension for in-IDE searching that returns immediate, reproducible results.
AI-written summary · about
chapters (12)
- 0:00Code search tricks
- 2:21Contributor-friendly projects
- 3:45Projects matching expertise
- 5:33Projects using your library
- 6:59Usage examples for libraries
- 9:32Auditing for exposed secrets
- 10:38Detecting compromised dependencies
- 13:06Vulnerable dependency versions
- 14:29Enforcing coding standards
- 16:34Recent framework changes
- 17:57Deprecated function calls
- 20:05Searching your repositories
related talks
08mSupercharging Developer Productivity With Advanced Code Search
20mDevX: History of Code Search
18mNew Open Source Tools to Enable InnerSource
42mContribute to OpenSearch: Build Your Skills While Advancing Open Technolo...
37mBeyond Grep: Semantic Code Search for Safer Change at Scale
18mZero To Hero: Building a Developer-First Search Experience With OpenSearch
46m5 Open Source Security Tools All Developers Should Know About
45mWhat’s Going On In A FOSS Project?