Consolidate SAST findings from sast/*-results.md into a prioritized final-report.md.
npx skills add https://github.com/utkusen/sast-skills --skill sast-report
Please help me install this Agent Skill. Skill: sast-report Source: https://github.com/utkusen/sast-skills/tree/main/sast-files/.agents/skills/sast-report Command: npx skills add https://github.com/utkusen/sast-skills --skill sast-report
Consolidate all SAST vulnerability findings from the sast/ folder into a single, prioritized report.
Run the final report generation for the current project after completing all vulnerability detections.
High-intent search queries and answers about installing and using this skill.
You can consolidate SAST vulnerability findings by reading all per-project results files and compiling them into a single, prioritized report. The tool reads all sast/*-results.md files and writes a consolidated sast/final-report.md for stakeholders.
SAST risk prioritization ranks vulnerabilities by severity levels, specifically Critical, High, Medium, and Low. The report generation process filters findings to include only [VULNERABLE] and [LIKELY VULNERABLE] results, ranking them further by confidentiality impact.
You need to generate a final security report after all vulnerability-detection steps have produced per-project findings. Running this process provides a concise executive summary and consolidated remediation guidance for stakeholders.
The best way to aggregate multiple SAST results is to use an automation tool that reads all sast/*-results.md files and compiles them into sast/final-report.md. This approach consolidates remediation guidance and ranks severity by Critical, High, Medium, and Low.
No, the consolidated SAST report does not include all findings. It specifically filters the output to include only [VULNERABLE] and [LIKELY VULNERABLE] findings, excluding other results to provide a concise, prioritized report.
No, you should not run final report generation before all vulnerability detections are complete. The tool applies after all vulnerability-detection steps have produced per-project findings to ensure the consolidated sast/final-report.md is comprehensive.
camoneartConfigure Semgrep, SonarQube, and CodeQL for automated vulnerability detection in CI/CD pipelines.
utkusenTrace dynamic template strings to detect SSTI vulnerabilities across multi-language codebases.
AidenSbVevoOrchestrate static analysis, supply-chain risk, and configuration review with Semgrep and CodeQL.
dapperdiversGenerate structured markdown penetration test reports from JSON security scan findings.
