diff --git a/pkgs/tools/security/semgrep/common.nix b/pkgs/development/python-modules/semgrep/common.nix
similarity index 100%
rename from pkgs/tools/security/semgrep/common.nix
rename to pkgs/development/python-modules/semgrep/common.nix
diff --git a/pkgs/tools/security/semgrep/default.nix b/pkgs/development/python-modules/semgrep/default.nix
similarity index 97%
rename from pkgs/tools/security/semgrep/default.nix
rename to pkgs/development/python-modules/semgrep/default.nix
index 5baf13c2b833..939454a71975 100644
--- a/pkgs/tools/security/semgrep/default.nix
+++ b/pkgs/development/python-modules/semgrep/default.nix
@@ -1,7 +1,8 @@
 { lib
+, callPackage
 , fetchFromGitHub
 , semgrep-core
-, buildPythonApplication
+, buildPythonPackage
 , pythonPackages
 
 , pytestCheckHook
@@ -15,7 +16,7 @@ let
   common = import ./common.nix { inherit lib; };
   semgrepBinPath = lib.makeBinPath [ semgrep-core ];
 in
-buildPythonApplication rec {
+buildPythonPackage rec {
   pname = "semgrep";
   inherit (common) version;
   src = fetchFromGitHub {
@@ -130,7 +131,7 @@ buildPythonApplication rec {
   '';
 
   passthru = {
-    inherit common;
+    inherit common semgrep-core;
     submodulesSubset = lib.mapAttrs (k: args: fetchFromGitHub args) common.submodules;
     updateScript = ./update.sh;
   };
diff --git a/pkgs/tools/security/semgrep/semgrep-core.nix b/pkgs/development/python-modules/semgrep/semgrep-core.nix
similarity index 100%
rename from pkgs/tools/security/semgrep/semgrep-core.nix
rename to pkgs/development/python-modules/semgrep/semgrep-core.nix
diff --git a/pkgs/tools/security/semgrep/update.sh b/pkgs/development/python-modules/semgrep/update.sh
similarity index 100%
rename from pkgs/tools/security/semgrep/update.sh
rename to pkgs/development/python-modules/semgrep/update.sh
diff --git a/pkgs/top-level/all-packages.nix b/pkgs/top-level/all-packages.nix
index 6063e994bb90..3a1057e0b6ca 100644
--- a/pkgs/top-level/all-packages.nix
+++ b/pkgs/top-level/all-packages.nix
@@ -11951,8 +11951,8 @@ with pkgs;
 
   semantic-release = callPackage ../development/tools/semantic-release { };
 
-  semgrep = python3.pkgs.callPackage ../tools/security/semgrep { };
-  semgrep-core = callPackage ../tools/security/semgrep/semgrep-core.nix { };
+  semgrep = python3.pkgs.toPythonApplication python3.pkgs.semgrep;
+  inherit (semgrep.passthru) semgrep-core;
 
   setroot = callPackage  ../tools/X11/setroot { };
 
diff --git a/pkgs/top-level/python-packages.nix b/pkgs/top-level/python-packages.nix
index 6582ff759efb..57c246806f65 100644
--- a/pkgs/top-level/python-packages.nix
+++ b/pkgs/top-level/python-packages.nix
@@ -14285,6 +14285,10 @@ self: super: with self; {
 
   semantic-version = callPackage ../development/python-modules/semantic-version { };
 
+  semgrep = callPackage ../development/python-modules/semgrep {
+    semgrep-core = callPackage ../development/python-modules/semgrep/semgrep-core.nix { };
+  };
+
   semaphore-bot = callPackage ../development/python-modules/semaphore-bot { };
 
   semver = callPackage ../development/python-modules/semver { };