diff --git a/justfile b/justfile
index 2e556e906..f1874d2fb 100644
--- a/justfile
+++ b/justfile
@@ -30,3 +30,10 @@ clippy:
 # run `cargo clippy --fix` on everything
 clippy-fix:
   cargo clippy --locked --offline --workspace --all-targets --fix
+
+
+# run `semgrep`
+semgrep:
+  env SEMGREP_ENABLE_VERSION_CHECK=0 \
+    semgrep --error --no-rewrite-rule-ids --config contrib/semgrep.yml
+