semgrep - Semgrep Static Code Analysis Scanner
Run parallel Semgrep static analysis scans on codebases to detect security vulnerabilities
Tags
Updated: 2026-06-30Capabilities
Typical Inputs
Typical Outputs
What this skill does
- run Semgrep scan
- detect languages
- check Pro status
- select scan mode
- select rulesets
- spawn scan tasks
- merge SARIF results
- generate output files
Inputs
- codebase to scan
- output directory path
- Semgrep CLI
Outputs
- SARIF scan results
- vulnerability reports
- rulesets log file
Requirements
- Semgrep CLI installed
- parallel task execution supported
