Automate security scanning of codebases with Semgrep rules and SARIF or JSON outputs.
npx skills add https://github.com/aleister1102/skills --skill semgrep-aleister1102
Please help me install this Agent Skill. Skill: semgrep Source: https://github.com/aleister1102/skills/tree/main/semgrep Command: npx skills add https://github.com/aleister1102/skills --skill semgrep-aleister1102
Semgrep enables fast, scalable security scanning and pattern matching across codebases, helping identify vulnerabilities and enforce rules with minimal overhead.
Run semgrep with the auto configuration on your project to perform the initial security scan.
High-intent search queries and answers about installing and using this skill.
Static analysis using Semgrep scans your codebase with pattern matching and taint mode to identify vulnerabilities quickly. It applies pre-configured rules to automate security checks across your project with minimal overhead.
Security scanning integrates into CI/CD pipelines by running Semgrep rules automatically during builds. The scanner outputs results in SARIF or JSON formats, allowing downstream tools to ingest and process vulnerability discoveries.
Yes, you can create and customize YAML-based rules for targeted code pattern matching. This allows you to define specific patterns and enforce custom security rules tailored to your codebase requirements.
Taint mode in static analysis tracks the flow of untrusted data through your codebase to identify vulnerabilities. Semgrep supports taint mode to help discover where potentially malicious input reaches sensitive functions.
Yes, Semgrep works with auto configuration to perform quick initial security scans. Running with the auto config applies popular rule sets automatically, enabling fast code analysis without requiring manual rule specification.
devopstalesScan source code for security vulnerabilities and code quality issues with Semgrep.
ayehiaaParse SARIF security scan outputs into deduplicated findings and summaries.
truongnatAudits code for OWASP Top 10 vulnerabilities, hardcoded secrets, and unsafe patterns.
rohanbhatia27Automate creation of Semgrep rules for security vulnerabilities and code patterns.
