sast-scanning - Static Application Security Testing
Identify security vulnerabilities in source code through static analysis
Tags
Updated: 2026-05-11What this skill does
- Scan source code
- Identify vulnerabilities
- Run Semgrep scans
- Execute CodeQL analysis
- Configure SonarQube scanner
- Create custom rules
- Generate security reports
- Configure quality gates
Inputs
- Source code repository
- SAST tool installation
- CI/CD pipeline
- Custom rules configuration
- Scanner credentials
Outputs
- Security scan results
- Vulnerability reports
- Quality gate status
- SARIF format files
- JSON format reports
Requirements
- Source code access
- CI/CD pipeline
- SAST tool installation
