Identify SAST, dependency, secret, and supply-chain risks across source code and history.
npx skills add https://github.com/Xerrion/opencode --skill pentest-sast
Please help me install this Agent Skill. Skill: pentest-sast Source: https://github.com/Xerrion/opencode/tree/main/skills/pentest-sast Command: npx skills add https://github.com/Xerrion/opencode --skill pentest-sast
Static security testing for codebases to identify vulnerable dependencies, secrets, and compromised supply chains during pentest engagements.
Run a full repository analysis to surface SAST findings and generate a prioritized remediation plan
High-intent search queries and answers about installing and using this skill.
Run a full repository SAST analysis to surface code risks, vulnerable dependencies, and secrets. The scanner applies a per-language tool matrix across JavaScript, Python, Go, and other supported languages to identify issues and generate a prioritized remediation plan.
Static application security testing for supply-chain risks identifies compromised dependencies and vulnerable packages in source code. You need it during pentest engagements or development to detect vulnerable dependencies and secrets before deployment.
Yes, this code security scanner works with multi-language dependency graphs and CI pipelines. It supports language-aware scanners for JavaScript, Python, Go, Rust, Java/JVM, Ruby, and PHP to surface deployment issues.
Yes, you can use secret scanning patterns to discover credentials during a pentest engagement. The tool integrates secret scanning and credential discovery into existing workflows to surface exposed secrets across source code and history.
The best way to triage SAST findings is to run a full repository analysis that surfaces supply-chain vulnerabilities with built-in triage guidance. It provides remediation workflows and a prioritized plan for resolving detected code risks and dependency issues.
Semgrep integrates into per-language security audits by applying a language-aware tool matrix to scan source code. It identifies SAST findings across supported languages like JavaScript, Python, Go, Rust, Java, Ruby, and PHP during pentest engagements.
bejranondaAnalyze code complexity and detect code smells in multi-language codebases.
DonTiziScan codebases for secrets, OWASP risks, and vulnerable dependencies.
rnavarychAutomate security testing with Snyk, Semgrep, Gitleaks, and OWASP ZAP in CI/CD pipelines.
ntuan2502Scan project dependencies, code patterns, secrets, and configurations for vulnerabilities.
