Plugins
3 plugins@saranskumar
Anti Slop
Anti Slop from saranskumar/anti-slop.
72 skills · plugin
@trailofbits
Static Analysis
Static analysis toolkit with CodeQL, Semgrep, and SARIF parsing for security vulnerability detection
3 skills · plugin
@dataroaring
Dataroaring Skills
A writing coach for technical articles based on 'Writing for Developers' by Piotr Sarna & Cynthia Dunlop
3 skills · plugin
Results for “sar”
6 skills
trailofbits semgrep
Run Semgrep static analysis scans with automatic language detection, parallel subagent execution, and merged SARIF output. Supports full ruleset coverage or high-confidence security vulnerability filtering.
6k · bundle
mukul975 integrating-sast-into-github-actions-pipeline
Integrates Static Application Security Testing (SAST) tools—CodeQL and Semgrep—into GitHub Actions CI/CD pipelines, configuring automated code scanning, tuning rules, uploading SARIF results, and establishing quality gates that block merges on high-severity vulnerabilities.
24.6k · bundle
More results
comeonoliver semgrep
Runs Semgrep static analysis to find bugs and security vulnerabilities, with guidance on installation, rule selection, custom rule writing, and CI/CD integration.
61
leandrobenjaminl security-auditor
Automated security auditing covering SAST, DAST, dependency scanning, secret detection, container hardening, and compliance checks before deployments or when integrating new dependencies.
0
mukul975 implementing-github-advanced-security-for-code-scanning
Configure GitHub Advanced Security with CodeQL to perform automated static analysis and vulnerability detection across repositories at enterprise scale.
24.6k · bundle
trailofbits codeql
Scans a codebase for security vulnerabilities using CodeQL's interprocedural data flow and taint tracking analysis, with support for multiple languages, scan modes, and data extension models.
6k · bundle