skills.rest
AgentSecOps
AgentSecOpsOFFICIAL
Explore all skills by this author →
GitHub

sast-semgrep

Run Semgrep SAST scans to detect security flaws and map findings to OWASP and CWE standards.

183|35|Updated Nov 19, 2025
Search Tags:#automation#sast#static-analysis#semgrep#security-review#code-security
One-click install
npx skills add https://github.com/AgentSecOps/SecOpsAgentKit --skill sast-semgrep-agentsecops
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: sast-semgrep
Source: https://github.com/AgentSecOps/SecOpsAgentKit/tree/main/skills/appsec/sast-semgrep
Command: npx skills add https://github.com/AgentSecOps/SecOpsAgentKit --skill sast-semgrep-agentsecops

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This skill enables automated static application security testing (SAST) using Semgrep to detect vulnerabilities, provide security reviews, and deliver remediation guidance aligned with OWASP Top 10 and CWE mappings.

Core Features & Use Cases

  • Automated SAST scans across multiple languages to identify security flaws in codebases.
  • Security review workflows with actionable remediation guidance and support for custom rule development.
  • CI/CD integration, change-aware scanning, and reporting to empower secure software delivery.

Quick Start

Run a baseline Semgrep scan against your codebase to generate an initial security findings report.

Frequently Asked Questions about sast-semgrep

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run automated SAST scans to detect vulnerabilities in my codebase?▼

Automated SAST scans identify security flaws by applying Semgrep rules across multiple languages, mapping results to OWASP and CWE standards. You can run a baseline scan against your codebase to generate an initial security findings report.

How does static analysis mapping work with OWASP Top 10 and CWE standards?▼

Static analysis mapping aligns detected vulnerabilities with OWASP Top 10 and CWE standards by evaluating Semgrep scan results. This mapping provides actionable remediation guidance and structured security review workflows for identified codebase flaws.

Can I integrate Semgrep static analysis into CI/CD pipelines and pull requests?▼

Semgrep static analysis integrates with CI/CD pipelines and pull requests through provided scripts and integration assets. This enables change-aware scanning and automated reporting to support secure software delivery within existing development workflows.

Do I need Python to run Semgrep security checks on my source code?▼

Python 3.8 or higher is required to run Semgrep security checks, along with Semgrep rules or configurations. The Skill provides scripts, references, and assets to support automated scanning and reporting across multiple programming languages.

What is the best way to create custom Semgrep rules for security reviews?▼

Custom Semgrep rule development for security reviews is supported through the Skill's security review workflows. These workflows provide actionable remediation guidance and allow you to tailor static analysis rules to detect specific vulnerabilities in your codebase.

Does this static analysis tool support scanning multiple programming languages?▼

Static analysis scanning supports multiple programming languages to identify security flaws across diverse codebases. Semgrep rules are applied uniformly, and findings are mapped to CWE and OWASP standards regardless of the source language being analyzed.

Related Skills

Explore More Software Engineering Skills→
RazisafirRazisafir
1

implementing-semgrep-for-custom-sast-rules

Implement custom Semgrep SAST rules in YAML for vulnerability detection.

Community
Intermediate
spallempatispallempati

secure-coding-enforcement

Integrate SAST tools into CI/CD to block pull requests with high-severity findings.

Community
Advanced
Logos-LiberLogos-Liber
17

vulnerability-scanning

Identifies security vulnerabilities in code, dependencies, and container images.

Official
Advanced
EngineerWithAIEngineerWithAI
4

sast-configuration

Configure Semgrep, SonarQube, and CodeQL for automated vulnerability detection.

Official
Intermediate