sast-configuration — Skills

What it does

Set up SAST scanning in CI/CD pipelines

Create custom security rules for your codebase

Configure quality gates and compliance policies

Optimize scan performance and reduce false positives

Integrate multiple SAST tools for defense-in-depth

Custom rule creation with pattern matching

Language-specific security rules (Python, JavaScript, Go, Java, etc.)

sast configuration

Source

Repository: https://github.com/wshobson/agents

sast-configuration FAQ

What does the sast-configuration skill do?

Configure Static Application Security Testing (SAST) tools for automated vulnerability detection in application code. Use when setting up security scanning, implementing DevSecOps practices, or automating code vulnerability detection. Set up SAST scanning in CI/CD pipelines Create custom security rules for your codebase

What does sast-configuration require?

This skill provides comprehensive guidance for setting up and configuring SAST tools including Semgrep, SonarQube, and CodeQL. Use this skill when you need to: 3. Choose SAST tool based on language support and integration needs Configuration keys: DATA.

How do I install sast-configuration?

Run: npx -y skills add https://github.com/wshobson/agents --skill sast-configuration --agent claude-code — the source lives at github.com/wshobson/agents.

Maintain sast-configuration?

Let people know it's listed here — add the badge (live metrics, light/dark aware) or a plain link to your README or docs.

[![sast-configuration on getagentictools](https://getagentictools.com/badge/skills/wshobson-agents-sast-configuration.svg)](https://getagentictools.com/skills/wshobson-agents-sast-configuration?ref=badge)

npx agentictools info skills/wshobson-agents-sast-configuration

The second line is the CLI lookup for this page — handy in READMEs and docs.