run-semgrep

Run SemGrep static analysis and security audits on C# source code.

3|2|Updated Aug 1, 2025

Search Tags:#automation #csharp #security #vulnerability #static-analysis #semgrep

Ready to run

npx skills add https://github.com/ClearMeasureLabs/bootcamp-palermo-workorders --skill run-semgrep

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: run-semgrep
Source: https://github.com/ClearMeasureLabs/bootcamp-palermo-workorders/tree/main/.claude/skills/run-semgrep
Command: npx skills add https://github.com/ClearMeasureLabs/bootcamp-palermo-workorders --skill run-semgrep

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires uv, and includes scripts (resource) components.

What problem does it solve?

This Skill automates the identification of security vulnerabilities, hardcoded secrets, and static analysis issues within the codebase, ensuring consistent code quality and security posture without requiring complex environment setups.

Core Features & Use Cases

Automated Security Audits: Runs comprehensive scans using industry-standard rulesets like p/csharp and p/security-audit.
Severity-Based Reporting: Aggregates findings by severity level to prioritize critical remediation efforts.
Use Case: Use this tool during a pull request or security review to automatically detect potential SQL injection vulnerabilities or exposed secrets before they reach production.

Quick Start

Run the semgrep skill to perform a full security scan of the current repository and display a summary of all findings.

Frequently Asked Questions about run-semgrep

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I run automated static analysis to find security vulnerabilities in C# code?▼

To run static analysis and find C# security vulnerabilities, you can use a tool that leverages SemGrep with industry-standard rulesets like p/csharp. This approach scans your entire repository to detect potential SQL injection and other code weaknesses automatically.

Can I use SemGrep to detect hardcoded secrets and architectural issues in my repository?▼

Yes, you can use SemGrep to detect hardcoded secrets and check architectural compliance across your repository. The automated security scanning applies rulesets like p/security-audit to identify exposed credentials and enforce structural standards.

Do I need PowerShell 7 and the uv package manager to scan C# source code on Windows?▼

Yes, you need PowerShell 7 and the uv package manager to execute isolated static analysis tasks natively on Windows. These dependencies are required to run the security auditing and vulnerability detection without complex environment setups.

What is the best way to prioritize security findings from a C# static code analysis scan?▼

The best way to prioritize security findings from a C# static code analysis is to aggregate the results by severity level. This allows you to focus your remediation efforts on critical vulnerabilities and exposed secrets before they reach production.

Does automated vulnerability scanning work with C# codebases during a pull request security review?▼

Yes, automated vulnerability scanning works with C# codebases during a pull request security review. You can trigger a full repository scan to detect potential issues like SQL injection or exposed secrets before merging code into production.