semgrep-scan

Run Semgrep SAST analysis for security and code quality

SKILL.md

GitHub

Semgrep SAST Scan

Run static application security testing with Semgrep.

What To Do

  1. Install: pip install semgrep or brew install semgrep

  2. Run scan:

    semgrep scan --config=auto --json --output=semgrep-report.json

  3. Custom rules for .NET:

    semgrep scan --config=p/csharp --config=p/owasp-top-ten --config=p/jwt

  4. CI Integration:

    - script: semgrep scan --config=auto --error --json -o semgrep.json
  displayName: "SAST Scan"

  5. Interpret results: Fix HIGH/ERROR severity first. Use --severity=error to filter.

Arguments

  • --config=<ruleset>: Semgrep config (auto, p/csharp, p/owasp-top-ten)
  • --severity=<level>: Filter by severity (info, warning, error)

Related in security

git-workflow

Git workflow guidance for commits, branches, and pull requests

by agno-agi
37,144

clerk-observability

Implement monitoring, logging, and observability for Clerk authentication. Use when setting up monitoring, debugging aut...

by jeremylongshore
1,061

juicebox-migration-deep-dive

Advanced Juicebox data migration strategies. Use when migrating from other recruiting platforms, performing bulk data im...

by jeremylongshore
1,061