security-semgrep

Run Semgrep SAST scans to detect security vulnerabilities in code.

Updated Feb 12, 2026

Search Tags:#code analysis #security #fastapi #supabase #sast #astro #semgrep

Ready to run

npx skills add https://github.com/kobogithub/knowledge --skill security-semgrep

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-semgrep
Source: https://github.com/kobogithub/knowledge/tree/main/skills/security-semgrep
Command: npx skills add https://github.com/kobogithub/knowledge --skill security-semgrep

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill addresses the critical need for early detection of security vulnerabilities in code, preventing potential breaches and data loss by identifying insecure coding patterns before they reach production.

Core Features & Use Cases

Static Application Security Testing (SAST): Utilizes Semgrep to scan code for security flaws.
Framework Support: Specifically tailored rules for FastAPI, Astro, and Supabase client interactions.
Custom Rule Creation: Enables defining project-specific security checks.
CI/CD Integration: Provides examples for seamless integration into GitHub Actions workflows.
Use Case: Automatically scan a new pull request for common vulnerabilities like SQL injection in FastAPI endpoints or hardcoded secrets in Supabase client configurations, failing the build if critical issues are found.

Quick Start

Run a basic Semgrep scan with auto-detected rules on the current project directory.

Frequently Asked Questions about security-semgrep

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I run SAST analysis to find security vulnerabilities in FastAPI endpoints?▼

This Skill performs SAST analysis using Semgrep to detect security vulnerabilities in FastAPI endpoints. It applies predefined and custom rule sets to scan source code, identifying injection flaws and insecure coding patterns before deployment.

Can I automatically scan pull requests for hardcoded secrets in Supabase client configurations?▼

Yes, you can automatically scan pull requests for hardcoded secrets in Supabase client configurations. The Skill provides CI/CD integration for GitHub Actions workflows to execute automated security checks and fail builds when critical issues are detected.

Does Semgrep work with Astro and TypeScript frameworks for static code analysis?▼

Semgrep works with Astro and TypeScript frameworks for static code analysis. The Skill provides specifically tailored security rules for JavaScript and TypeScript, detecting authentication bypass and other vulnerabilities across multiple programming languages.

What is the best way to create custom security rules for project-specific SAST checks?▼

The best way to create custom security rules for project-specific SAST checks is to define them within this Semgrep Skill. It enables custom rule creation alongside predefined sets, allowing you to target unique insecure coding patterns specific to your application architecture.

How do I integrate static application security testing into a CI/CD pipeline?▼

You integrate static application security testing into a CI/CD pipeline by configuring this Semgrep Skill within your GitHub Actions workflows. It provides integration examples to automate scanning on pull requests, ensuring continuous detection of vulnerabilities.