Executes Semgrep static analysis using the semgrep CLI with custom YAML rule packs. Supports --config auto for community rules, parses JSON output via --json flag, and integrates with Semgrep App API for centralized findings management and triage workflows.
Installs into .claude/skills of the current project.
Are you the author of Semgrep Rule Runner?
Add the live security badge to your README. It updates with every re-scan.
[](https://www.skillsdirectory.com/skills/agentskillexchange-semgrep-rule-runner)
---
name: "Semgrep Rule Runner"
slug: "semgrep-rule-runner"
description: "Executes Semgrep static analysis using the semgrep CLI with custom YAML rule packs. Supports --config auto for community rules, parses JSON output via --json flag, and integrates with Semgrep App API for centralized findings management and triage workflows."
github_stars: 14794
verification: "security_reviewed"
source: "https://github.com/semgrep/semgrep"
category: "Code Quality & Review"
framework: "Gemini"
tool_ecosystem:
github_repo: "semgrep/semgrep"
github_stars: 14794
---
# Semgrep Rule Runner
Executes Semgrep static analysis using the semgrep CLI with custom YAML rule packs. Supports --config auto for community rules, parses JSON output via --json flag, and integrates with Semgrep App API for centralized findings management and triage workflows.
## Installation
Use the upstream install or setup path that matches your environment:
- $ brew install semgrep
- $ docker run -it -v "${PWD}:/src" semgrep/semgrep semgrep login
- $ docker run -e SEMGREP_APP_TOKEN=<TOKEN> --rm -v "${PWD}:/src" semgrep/semgrep semgrep ci
- $ brew upgrade semgrep
Requirements and caveats from upstream:
- <a href="https://hub.docker.com/r/semgrep/semgrep">
- <img src="https://img.shields.io/docker/pulls/semgrep/semgrep.svg?style=flat-square" alt="Docker Pulls" />
- <img src="https://img.shields.io/docker/pulls/semgrep/semgrep.svg?style=flat-square" alt="Docker Pulls (Old)" />
Basic usage or getting-started notes:
- Semgrep is a fast, open-source, static analysis tool that searches code, finds bugs, and enforces secure guardrails and coding standards. Semgrep [supports 30+ languages](#language-support) and can run in an IDE, as a...
- [From the Semgrep AppSec Platform](#option-1-getting-started-from-the-semgrep-appsec-platform-recommended)
- [From the CLI](#option-2-getting-started-from-the-cli)
- Source: https://github.com/semgrep/semgrep
- Extracted from upstream docs: https://raw.githubusercontent.com/semgrep/semgrep/HEAD/README.md
## Source
- [Agent Skill Exchange](https://agentskillexchange.com/skills/semgrep-rule-runner/)
