skills.rest
mirandagabrieldev
mirandagabrieldevCOMMUNITY
Explore all skills by this author →
GitHub

sast-semgrep

Perform static analysis with Semgrep to identify security vulnerabilities and map findings to OWASP/CWE.

Updated Aug 23, 2026
Search Tags:#sast#ci-cd#semgrep#vulnerability-detection#security-review#owasp-top-ten#cwe-mapping
One-click install
npx skills add https://github.com/mirandagabrieldev/claude-build-template --skill sast-semgrep-mirandagabrieldev
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: sast-semgrep
Source: https://github.com/mirandagabrieldev/claude-build-template/tree/main/skills/security/sast-semgrep
Command: npx skills add https://github.com/mirandagabrieldev/claude-build-template --skill sast-semgrep-mirandagabrieldev

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

Static application security testing helps teams quickly detect vulnerabilities in code across languages, reducing manual review time and aligning findings with OWASP and CWE mappings.

Core Features & Use Cases

  • Automated SAST scanning across multiple languages with Semgrep and mapping to OWASP/CWE.
  • Security code reviews with pattern-based detection and remediation guidance.
  • CI/CD integration and custom rule development for organization-specific patterns.

Quick Start

Run Semgrep-based SAST scan on your repository to identify vulnerabilities and map findings to OWASP Top 10 and CWE.

Frequently Asked Questions about sast-semgrep

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my codebase for security vulnerabilities using Semgrep?▼

To scan your codebase for vulnerabilities using Semgrep, you perform static application security testing to detect issues across multiple languages, mapping findings directly to OWASP Top 10 and CWE categories. This generates remediation guidance for identified flaws.

How do I integrate SAST vulnerability detection into a CI/CD pipeline?▼

Integrating SAST vulnerability detection into a CI/CD pipeline involves running Semgrep scans on Git-based workflows for pull request checks. This automates security reviews and generates compliance reporting mapped to CWE and OWASP standards.

What is static analysis with CWE and OWASP mappings used for?▼

Static analysis with CWE and OWASP mappings is used to identify security vulnerabilities across multi-language repositories. It aligns automated pattern-based detections with standard compliance frameworks to provide actionable remediation guidance.

Do I need Python to run Semgrep security reviews?▼

Yes, you need Python 3.8 or higher to run Semgrep security reviews. Alongside Python and Git-based workflows, these prerequisites enable automated scanning and compliance reporting across your repository.

Can I develop custom rules for organization-specific vulnerability detection?▼

Yes, you can develop custom rules for organization-specific vulnerability detection. This allows you to extend Semgrep's pattern-based scanning to catch proprietary security flaws alongside standard OWASP and CWE detections.

Related Skills

Explore More Software Engineering Skills→
RazisafirRazisafir
1

implementing-semgrep-for-custom-sast-rules

Implement custom Semgrep SAST rules in YAML for vulnerability detection.

Community
Intermediate
nikhillinitnikhillinit

security-scanner

Detect security vulnerabilities, secrets, and misconfigurations in codebases.

Community
Advanced
srivtxsrivtx

code-review

Automate code review for local changes and GitHub pull requests.

Community
Advanced
voidrotvoidrot

sast-configuration

Configure SAST tools like Semgrep, CodeQL, and SonarQube for CI/CD pipelines.

Community
Intermediate