Sast Pipeline Scanner

Name: Sast Pipeline Scanner
Author: aibot88

ASecurity

Runs static application security testing using Semgrep rules and CodeQL queries against pull request diffs. Supports SARIF output format and integrates with GitHub Advanced Security for findings management.

4 stars
0 votes
0 copies
3 views
Added September 12, 2026

businesspythongotestinggitsecuritydocumentation

Works with

claude code

Security analysis

A96/100

mediumInstalls packages at runtime which could introduce malicious dependencies

Pro scans all 2 files and shows the line behind each finding

Scanned September 12, 2026

npx -y skills add aibot88/sec_skill_store --skill sast-pipeline-scanner --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Sast Pipeline Scanner?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Sast Pipeline Scanner

[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/aibot88-sast-pipeline-scanner/badge)](https://www.skillsdirectory.com/skills/aibot88-sast-pipeline-scanner)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro

SKILL.md

---
title: "SAST Pipeline Scanner"
description: "Runs static application security testing using Semgrep rules and CodeQL queries against pull request diffs. Supports SARIF output format and integrates with GitHub Advanced Security for findings management."
verification: "security_reviewed"
source: "https://github.com/semgrep/semgrep"
author: "Semgrep"
category:
  - "Security & Verification"
framework:
  - "Claude Code"
tool_ecosystem:
  github_repo: "semgrep/semgrep"
  github_stars: 14922
---

# SAST Pipeline Scanner

Runs static application security testing using Semgrep rules and CodeQL queries against pull request diffs. Supports SARIF output format and integrates with GitHub Advanced Security for findings management.

## Installation

Choose whichever fits your setup:

1. Copy this skill folder into your local skills directory.
2. Clone the repo and symlink or copy the skill into your agent workspace.
3. Add the repo as a git submodule if you manage shared skills centrally.
4. Install it through your internal provisioning or packaging workflow.
5. Download the folder directly from GitHub and place it in your skills collection.

Install command or upstream instructions:

```
python3 -m pip install semgrep
```

## Documentation

- https://semgrep.dev/docs/

## Source

- [Agent Skill Exchange](https://agentskillexchange.com/skills/sast-pipeline-scanner/)