skills.rest
balic-AI-ML-R-D-Resources
balic-AI-ML-R-D-ResourcesOFFICIAL
Explore all skills by this author →
GitHub

semgrep

Automate security-focused code analysis with Semgrep across CI/CD pipelines.

Updated Apr 5, 2026
Search Tags:#security#static-analysis#github-actions#ci-cd#code-analysis#semgrep#taint
One-click install
npx skills add https://github.com/balic-AI-ML-R-D-Resources/eliza_autonomous_agents --skill semgrep-balic-ai-ml-r-d-resources
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: semgrep
Source: https://github.com/balic-AI-ML-R-D-Resources/eliza_autonomous_agents/tree/main/packages/skills/skills/static-analysis/skills/semgrep
Command: npx skills add https://github.com/balic-AI-ML-R-D-Resources/eliza_autonomous_agents --skill semgrep-balic-ai-ml-r-d-resources

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Semgrep provides fast, automated static analysis to detect security vulnerabilities, insecure patterns, and compliance issues in codebases.

Core Features & Use Cases

  • Quick scans with auto-detect rules
  • Taint mode for data-flow analysis and precise vulnerability tracking
  • CI/CD integration and customizable rules for teams
  • Multi-language support (Python, JavaScript, Go, and more)
  • Use Case: Security teams can quickly detect vulnerabilities in pull requests and enforce coding standards at commit time.

Quick Start

Run semgrep on your repository with a default rule set to get an initial security scan.

Frequently Asked Questions about semgrep

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run static analysis to detect security vulnerabilities in my codebase?▼

Static analysis detects security vulnerabilities by scanning your codebase for insecure patterns. You can run an automated scan using a default rule set to quickly identify compliance issues and security flaws across multiple programming languages.

Can I use taint mode data flow analysis to track vulnerabilities in pull requests?▼

Taint mode data flow analysis tracks vulnerabilities by mapping how untrusted data moves through your code. This precise vulnerability tracking can be integrated into GitHub Actions to automatically scan pull requests and enforce coding standards at commit time.

Does Semgrep work with CI/CD pipelines and GitHub Actions for automated code scanning?▼

Semgrep integrates seamlessly with CI/CD pipelines and GitHub Actions for automated code scanning. It applies rule-based pattern matching directly within your continuous integration workflow to detect security vulnerabilities and enforce policy at commit time.

What is the best way to enforce coding standards and security policies across multiple languages?▼

The best way to enforce coding standards across multiple languages is using customizable rule-based static analysis. By configuring automated scanning rules in your CI/CD pipeline, security teams can consistently detect insecure patterns and enforce policies across Python, JavaScript, Go, and more.

Do I need to configure custom rules to perform a quick initial security scan?▼

You do not need to configure custom rules for an initial security scan. You can run a quick scan using auto-detect rules, which automatically apply pattern matching and vulnerability detection to your repository without requiring custom rule configuration.

Related Skills

Explore More Software Engineering Skills→
leonardoteodorooleonardoteodoroo

sast-configuration

Configure Semgrep, SonarQube, and CodeQL for CI/CD security scanning.

Community
Advanced
netresearchnetresearch
51

security-audit

Detect security vulnerabilities in PHP applications and score risks with CVSS v3.1.

Official
Advanced
mindfu23mindfu23
3

crew-commit

Automate Git workflow with pre-commit checks, branch creation, and pull request generation.

Community
Intermediate
manuelbrandner85manuelbrandner85

codeql

Scan software projects for security vulnerabilities using CodeQL data flow analysis.

Community
Advanced