sast-configuration

npx skills add sickn33/agentic-awesome-skills --skill sast-configuration --agent claude-code

Same command for any agent — swap --agent for codex, cursor, copilot.

# SAST Configuration Static Application Security Testing (SAST) tool setup, configuration, and custom rule creation for comprehensive security scanning across multiple programming languages. ## Use this skill when - Set up SAST scanning in CI/CD pipelines - Create custom security rules for your codebase - Configure quality gates and compliance policies - Optimize scan performance and reduce false positives - Integrate multiple SAST tools for defense-in-depth ## Do not use this skill when - You only need DAST or manual penetration testing guidance - You cannot access source code or CI/CD pipelines - You need organizational policy decisions rather than tooling setup ## Instructions 1. Identify languages, repos, and compliance requirements. 2. Choose tools and define a baseline policy. 3. Integrate scans into CI/CD with gating thresholds. 4. Tune rules and suppressions based on false positives. 5. Track remediation and verify fixes. ## Safety - Avoid scanning sensitive repos with third-party services without approval. - Prevent leaks of secrets in scan artifacts and logs. ## Overview This skill provides comprehensive guidance for setting up and configuring SAST tools including Semgrep

Semgrep quick start
pip install semgrep
semgrep --config=auto --error
SonarQube with Docker
docker run -d --name sonarqube -p 9000:9000 sonarqube:latest
CodeQL CLI setup
gh extension install github/gh-codeql
codeql database create mydb --language=python
PCI-DSS focused scan
semgrep --config p/pci-dss --json -o pci-scan-results.json