skills.rest
aist-ai-sast
aist-ai-sastOFFICIAL
Explore all skills by this author →
GitHub

sast-analyzer-add

Validate and scaffold Dockerfile, analyze.sh, analyzers.yaml entry, and isolated tests for new SAST analyzers.

Updated Aug 31, 2025
Search Tags:#testing#validation#scaffold#yaml#docker#sast#analyzer
One-click install
npx skills add https://github.com/aist-ai-sast/aist --skill sast-analyzer-add
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: sast-analyzer-add
Source: https://github.com/aist-ai-sast/aist/tree/main/.claude/skills/sast-analyzer-add
Command: npx skills add https://github.com/aist-ai-sast/aist --skill sast-analyzer-add

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

The skill automates and enforces the creation of all essential components when adding a new SAST analyzer to the sast-pipeline, preventing incomplete configurations.

Core Features & Use Cases

  • Validates and scaffolds Dockerfile and analyze.sh for new analyzers.
  • Registers new analyzers in analyzers.yaml with correct metadata.
  • Sets up isolated tests with fixtures to ensure changes work before deployment.

Quick Start

Follow these steps to add a new analyzer and let the tool scaffold and validate all required components.

Frequently Asked Questions about sast-analyzer-add

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I add a new SAST analyzer to a pipeline?▼

To add a new SAST analyzer, you must scaffold the required Dockerfile, create an analyze.sh script, register the analyzer in analyzers.yaml, and set up isolated tests to validate the configuration before deployment.

What files are required to integrate a SAST analyzer?▼

Integrating a SAST analyzer requires a Dockerfile for the environment, an analyze.sh execution script, an entry in analyzers.yaml for metadata configuration, and isolated test fixtures to validate functionality.

How do I validate a new SAST analyzer configuration works?▼

You validate a new SAST analyzer by setting up isolated tests with fixtures that verify the Dockerfile, analyze.sh, and analyzers.yaml entry function correctly together before the analyzer is deployed.

Does scaffolding a SAST analyzer automatically update analyzers.yaml?▼

Yes, scaffolding a SAST analyzer automatically registers the new component in analyzers.yaml with the correct metadata, ensuring consistent configuration and preventing incomplete pipeline setups.

Why does my SAST analyzer integration fail during pipeline execution?▼

SAST analyzer integration typically fails when required components like the Dockerfile, analyze.sh, or analyzers.yaml metadata are missing or improperly structured, which this validation process prevents.

Related Skills

Explore More Software Engineering Skills→
yf8578yf8578
1

setup

Automate BioClaw setup with dependencies, container runtimes, and authentication.

Community
Advanced
Sheldon-92Sheldon-92
3

Testing

Execute test suites and report failures with coverage metrics.

Community
Intermediate
rauly-1408rauly-1408

container-scanner

Scan Dockerfiles and container images for security vulnerabilities and configuration issues.

Community
Intermediate
hendrax5hendrax5

skill-create

Generate project-local SKILL.md manifests and eval scaffolding in .claude/skills directories.

Community
Intermediate