sast-configuration

Configure Semgrep, SonarQube, and CodeQL for automated vulnerability scanning.

5|Updated Dec 1, 2025

Search Tags:#ci/cd #security #sast #devsecops #codeql #sonarqube #semgrep

One-click install

npx skills add https://github.com/zsutxz/ClaudeLearning --skill sast-configuration-zsutxz

Or copy as Structured Prompt for Agent▼

Please help me install this Agent Skill.
Skill: sast-configuration
Source: https://github.com/zsutxz/ClaudeLearning/tree/main/.claude/security-scanning/skills/sast-configuration
Command: npx skills add https://github.com/zsutxz/ClaudeLearning --skill sast-configuration-zsutxz

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires semgrep, sonarqube, codeql, docker, gh, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

Configure Static Application Security Testing (SAST) tools to automatically scan code for vulnerabilities across languages and CI/CD pipelines, reducing manual review time and catching issues early.

Core Features & Use Cases

Semgrep configuration and custom rule creation for multi-language codebases.
SonarQube setup including quality gates, hotspots analysis, and language-specific profiles.
CodeQL integration with GitHub Advanced Security for vulnerability detection.
CI/CD pattern integrations and tuning to minimize false positives.
Performance optimization and defense-in-depth when mixing multiple SAST tools.

Quick Start

Example: Set up Semgrep in CI with a baseline config, run an initial scan, and iteratively add organization-specific rules.