skills.rest
AgentSecOps
AgentSecOpsOFFICIAL
Explore all skills by this author →
GitHub

sast-horusec

Run Horusec SAST scans to detect vulnerabilities and secrets in git history.

183|35|Updated Nov 19, 2025
Search Tags:#multi-language#sast#static-analysis#ci-cd#secrets-detection#vulnerability-scanning#horusec
One-click install
npx skills add https://github.com/AgentSecOps/SecOpsAgentKit --skill sast-horusec
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: sast-horusec
Source: https://github.com/AgentSecOps/SecOpsAgentKit/tree/main/skills/secsdlc/sast-horusec
Command: npx skills add https://github.com/AgentSecOps/SecOpsAgentKit --skill sast-horusec

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) and assets (resource) components.

What problem does it solve?

Horusec SAST Scanner analyzes source code across multiple languages to identify vulnerabilities and secrets in git history, enabling secure SDLC and faster remediation.

Core Features & Use Cases

  • Multi-language SAST across 18+ languages with 20+ security tools.
  • Secret detection in git history to surface credential exposures.
  • CI/CD integration to embed security checks into development workflows.

Quick Start

Run a Horusec scan on your repository to generate a vulnerability report and seed the CI pipeline with the results.

Frequently Asked Questions about sast-horusec

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run SAST across multiple programming languages in a CI/CD pipeline?▼

To detect leaked secrets in git history, the scanner analyzes commit history to surface credential exposures and generates a vulnerability report classifying findings by severity for secure remediation.

Can I use static analysis for pre-commit checks in local development?▼

Yes, static analysis can be applied in local development and pre-commit checks to run multi-language SAST analyses, identifying vulnerabilities before code is committed to the repository.

What is the best way to identify security vulnerabilities across a multi-language codebase?▼

The best way to identify security vulnerabilities across a multi-language codebase is running SAST analyses that leverage 20+ security tools to scan 18+ languages, classifying findings by severity and emitting CI-friendly outputs.

Does Horusec support secret detection in git history alongside vulnerability scanning?▼

Yes, Horusec supports both vulnerability scanning and secret detection in git history, applying multi-language SAST analyses to surface credential exposures and classify findings by severity.

Related Skills

Explore More Software Engineering Skills→
TheSethRoseTheSethRose

sast-configuration

Configure Semgrep, SonarQube, and CodeQL for automated vulnerability scanning in CI/CD workflows.

Community
Advanced
GDSDNGDSDN
3

qa-security-checklist

Scan codebases for predefined vulnerability patterns and generate severity reports.

Community
Advanced
duanbiao2000duanbiao2000
3

sast-configuration

Configure Semgrep, SonarQube, and CodeQL for automated vulnerability detection.

Community
Advanced
kivo360kivo360
1

moai-domain-security

Mitigate security vulnerabilities in CI/CD pipelines using OWASP Top 10 and SAST/DAST workflows.

Community
Advanced