sast-semgrep

Name: sast-semgrep
Availability: InStock
Author: rohun

Automate Semgrep SAST scans to identify security vulnerabilities across codebases.

232|38|Updated Jan 18, 2026

Search Tags:#security #owasp #sast #vulnerabilities #code-review #semgrep #cwe

Ready to run

npx skills add https://github.com/rohunj/claude-build-workflow --skill sast-semgrep

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: sast-semgrep
Source: https://github.com/rohunj/claude-build-workflow/tree/main/skills/security/sast-semgrep
Command: npx skills add https://github.com/rohunj/claude-build-workflow --skill sast-semgrep

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires semgrep, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

Static application security testing is essential but can be tedious; this skill automates SAST scans using Semgrep to identify vulnerabilities and enforce secure coding practices.

Core Features & Use Cases

Automated vulnerability detection across multiple languages with OWASP and CWE mappings
Security code review workflows integrated into PRs and CI/CD
Custom rule development and CI/CD integration for organization-specific patterns

Quick Start

Run a Semgrep scan against your codebase to detect security vulnerabilities using the auto config with severity thresholds.

Frequently Asked Questions about sast-semgrep

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I automate SAST scans to find vulnerabilities in my codebase?▼

You can automate SAST scans using Semgrep to identify vulnerabilities across multi-language repositories. It applies security-focused rule sets with CWE and OWASP mappings to detect issues during initial scans or within PR workflows.

Can I integrate Semgrep security checks into pull request and CI/CD workflows?▼

Yes, Semgrep security checks can be integrated directly into pull request and CI/CD workflows. This enables automated security code reviews and vulnerability detection within your existing development pipeline.

Does Semgrep support custom rule development for organization-specific security patterns?▼

Semgrep supports custom rule development for organization-specific security patterns. You can create tailored rules to enforce secure coding practices and map them to specific CWE and OWASP vulnerabilities.

What security rule sets are used for OWASP Top Ten vulnerability detection?▼

Security rule sets like p/security-audit and p/owasp-top-ten are used for OWASP Top Ten vulnerability detection. These predefined configurations help identify and remediate security vulnerabilities across multiple languages.

Do I need Semgrep installed before running automated security code reviews?▼

Yes, you need Semgrep installed before running automated security code reviews. It can be installed via pip or directly within your CI environment to execute SAST scans and vulnerability detection.

How does static application security testing with Semgrep map to CWE vulnerabilities?▼

Static application security testing with Semgrep maps findings to CWE vulnerabilities using security-focused rule sets. This automated mapping helps identify and remediate specific vulnerability classes across multi-language repositories.