endor-custom-sast-rules

Validate and import custom OpenGrep and Semgrep rule YAML into Endor Labs SemgrepRule resources.

4|Updated Oct 18, 2025

Search Tags:#validation #sast #rules #semgrep #import #opengrep #endor labs

One-click install

npx skills add https://github.com/endorlabs/endorlabs-sdk --skill endor-custom-sast-rules

Or copy as Structured Prompt for Agent▼

Please help me install this Agent Skill.
Skill: endor-custom-sast-rules
Source: https://github.com/endorlabs/endorlabs-sdk/tree/main/agent-knowledge/skills/endor-custom-sast-rules
Command: npx skills add https://github.com/endorlabs/endorlabs-sdk --skill endor-custom-sast-rules

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires pyyaml, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill streamlines the creation, validation, and import of custom OpenGrep and Semgrep rules into Endor Labs, removing guesswork around rule shape, metadata, and platform compatibility.

Core Features & Use Cases

Rule authoring guidance: Helps you write Semgrep-compatible YAML with the required rule structure, patterns, metadata, and scoping.
Local validation: Supports checking rules with OpenGrep or Semgrep before import so you can catch syntax and shape problems early.
Platform import and lifecycle management: Uses the SAST rule manager to import, update, delete, disable, sync, and clean orphaned findings for SemgrepRule resources.
Use case: If you need to roll out a custom detector for secret leakage or unsafe code patterns, this Skill helps you validate the rule locally and push it into the correct Endor namespace with the right metadata.

Quick Start

Ask the skill to validate your Semgrep rule YAML for Endor Labs import and tell you whether it is ready to upload.

Frequently Asked Questions about endor-custom-sast-rules

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I import custom Semgrep rules into Endor Labs?▼

You can validate Semgrep rule YAML locally using OpenGrep or Semgrep before import to catch syntax and shape problems early, ensuring the rule is ready to upload into Endor Labs.

What is the required structure for Semgrep YAML rules in Endor Labs?▼

Semgrep YAML rules require a specific rule structure, patterns, metadata, and scoping to be compatible with Endor Labs, which normalizes the metadata during the import process.

Can I disable or delete existing SAST rules in Endor Labs?▼

Yes, the SAST rule manager handles deterministic rule lifecycle operations including enabling, disabling, updating, deleting, and cleaning orphaned findings for SemgrepRule resources.

Does this SAST rule import process work with OpenGrep?▼

Yes, the process fully supports OpenGrep and Semgrep rule YAML, allowing you to author, validate, repair syntax, and import custom OpenGrep rules into Endor Labs.