sast-scanning - SAST Code Security Scanning
Perform static analysis to identify security vulnerabilities in source code before deployment
Tags
Updated: 2026-05-11Capabilities
Typical Inputs
Typical Outputs
What this skill does
- scan source code
- identify vulnerabilities
- run Semgrep scanner
- run CodeQL analysis
- run SonarQube scanner
- create custom rules
- generate scan reports
- enforce quality gates
Inputs
- source code repository
- SAST tool configuration
- custom rules files
- CI/CD pipeline
- tool authentication tokens
Outputs
- vulnerability reports
- security findings
- scan result files
- quality gate status
Requirements
- source code access
- CI/CD pipeline
- SAST tool installation
- Docker capability
- PostgreSQL database