endor-custom-sast-rules

What problem does it solve?

This Skill streamlines the creation, validation, and import of custom OpenGrep and Semgrep rules into Endor Labs, removing guesswork around rule shape, metadata, and platform compatibility.

Core Features & Use Cases

• Rule authoring guidance: Helps you write Semgrep-compatible YAML with the required rule structure, patterns, metadata, and scoping.
• Local validation: Supports checking rules with OpenGrep or Semgrep before import so you can catch syntax and shape problems early.
• Platform import and lifecycle management: Uses the SAST rule manager to import, update, delete, disable, sync, and clean orphaned findings for SemgrepRule resources.
• Use case: If you need to roll out a custom detector for secret leakage or unsafe code patterns, this Skill helps you validate the rule locally and push it into the correct Endor namespace with the right metadata.

Quick Start

Ask the skill to validate your Semgrep rule YAML for Endor Labs import and tell you whether it is ready to upload.