Run Semgrep static analysis with parallel execution and merged SARIF output.
npx skills add https://github.com/vigolium/vigolium --skill semgrep-vigolium
Please help me install this Agent Skill. Skill: semgrep Source: https://github.com/vigolium/vigolium/tree/main/platform/vigolium-audit/src/content/skills/semgrep Command: npx skills add https://github.com/vigolium/vigolium --skill semgrep-vigolium
It automates Semgrep-based static code vulnerability scanning while preventing accidental telemetry leakage and enforcing an explicit, user-approved scan plan.
results.sarif suitable for review and tooling.Ask to scan the directory at a given path for vulnerabilities using the Semgrep ruleset “run all,” and wait for the approval prompt before the scans start.
High-intent search queries and answers about installing and using this skill.
Static analysis security audits across multiple languages are executed by detecting languages and running Semgrep scans concurrently using parallel Task subagents, then merging the outputs into a single consolidated report.
Cross-file taint analysis for vulnerability detection works by checking for Semgrep Pro availability and utilizing it to improve the detection of inter-file taint and data flow issues across the codebase.
Yes, you can generate a consolidated SARIF report by executing parallel codebase scanning and merging the static analysis outputs into a single results.sarif file suitable for review and tooling.
Yes, you must explicitly approve rulesets before running a vulnerability detection scan, as the system enforces safe execution by requiring a user-approved scan plan and disabling Semgrep telemetry.
The best way to filter static analysis results for security vulnerabilities is applying a two-tier filtering approach that uses severity pre-filtering alongside post-filter metadata criteria to isolate security-focused findings.
Semgrep works with parallel execution for multi-language codebase scanning by automatically detecting languages and running concurrent scans via Task subagents before merging the results.
lidge-junExecute Semgrep static analysis scans to detect vulnerabilities and code quality issues.
Dhruvipatel0514Identify and fix OWASP security vulnerabilities in source code repositories.
zzw4257Scan infrastructure-as-code files for security vulnerabilities and compliance deviations.
AidenSbVevoRun parallelized Semgrep static analysis and merge SARIF results.