semgrep - Semgrep Static Analysis Security Scan
Run Semgrep static analysis on codebases with parallel execution
Tags
Updated: 2026-06-30Capabilities
Typical Inputs
Typical Outputs
What this skill does
- detect programming languages
- check Semgrep Pro availability
- select scan mode
- select rulesets
- present scan plan
- get user approval
- spawn scan tasks
- run Semgrep scan
- merge scan results
- create output directory
- generate SARIF files
Inputs
- codebase directory
- user approval
- user-specified output directory
Outputs
- output directory
- scan results
- SARIF files
Requirements
- Semgrep CLI installed
- Semgrep Pro license (optional)