SAST Triage

Triage static analysis security findings by classifying severity, filtering false positives, and mapping results to CWE/CVE identifiers. This Skill processes outputs from gosec, golangci-lint, and govulncheck to distinguish genuine vulnerabilities from non-actionable noise.

Prioritize Go security vulnerabilities by estimating remediation effort and assigning priority based on severity classification. The Skill evaluates SAST scan results to provide developers with an actionable list of issues sorted by criticality.

Yes, you need shell access to execute SAST tools like golangci-lint, gosec, and govulncheck. The Skill also requires read access to Go source files and SAST output, plus write access to generate triage reports.

You can automatically classify SAST findings by severity in a CI pipeline. After security scans complete, the Skill processes results to flag critical vulnerabilities and categorize findings as Critical, High, Medium, Low, or FalsePositive.

Mapping security findings to CWE and CVE identifiers helps with remediation by providing standardized vulnerability references. This allows the Skill to accurately filter false positives and prioritize genuine issues based on their specific vulnerability classifications.

Automating SAST triage for Go source files is limited to processing outputs from gosec, golangci-lint, and govulncheck. The Skill requires direct read access to source files and cannot triage findings from unsupported static analysis tools.