Run Semgrep SAST scans to detect security vulnerabilities in code.
npx skills add https://github.com/kobogithub/knowledge --skill security-semgrep
Please help me install this Agent Skill. Skill: security-semgrep Source: https://github.com/kobogithub/knowledge/tree/main/skills/security-semgrep Command: npx skills add https://github.com/kobogithub/knowledge --skill security-semgrep
This Skill addresses the critical need for early detection of security vulnerabilities in code, preventing potential breaches and data loss by identifying insecure coding patterns before they reach production.
Run a basic Semgrep scan with auto-detected rules on the current project directory.
High-intent search queries and answers about installing and using this skill.
This Skill performs SAST analysis using Semgrep to detect security vulnerabilities in FastAPI endpoints. It applies predefined and custom rule sets to scan source code, identifying injection flaws and insecure coding patterns before deployment.
Yes, you can automatically scan pull requests for hardcoded secrets in Supabase client configurations. The Skill provides CI/CD integration for GitHub Actions workflows to execute automated security checks and fail builds when critical issues are detected.
Semgrep works with Astro and TypeScript frameworks for static code analysis. The Skill provides specifically tailored security rules for JavaScript and TypeScript, detecting authentication bypass and other vulnerabilities across multiple programming languages.
The best way to create custom security rules for project-specific SAST checks is to define them within this Semgrep Skill. It enables custom rule creation alongside predefined sets, allowing you to target unique insecure coding patterns specific to your application architecture.
You integrate static application security testing into a CI/CD pipeline by configuring this Semgrep Skill within your GitHub Actions workflows. It provides integration examples to automate scanning on pull requests, ensuring continuous detection of vulnerabilities.
TheSethRoseConfigure Semgrep, SonarQube, and CodeQL for automated vulnerability scanning in CI/CD workflows.
sugarforeverScan Python projects for security vulnerabilities and dependency issues.
dandudziAutomate SAST tool selection, configuration, and CI/CD integration.
drgaciwConfigure Semgrep, SonarQube, and CodeQL for automated vulnerability detection.
