SAST Security Runner
Automates static application security testing using Semgrep to identify vulnerabilities, security anti-patterns, and OWASP Top 10 issues.
SAST Runner is a specialized security tool that integrates the power of Semgrep into the Claude Code environment, enabling developers to perform comprehensive static analysis on their source code. It scans for a wide range of security risks, including OWASP Top 10 vulnerabilities and CWE Top 25 threats, across dozens of programming languages. This skill is essential for maintaining code integrity, identifying injection flaws, and ensuring compliance with modern security standards throughout the development lifecycle, providing actionable feedback and remediation guidance directly within the terminal.
主な機能
012 GitHub stars
02Support for 15+ languages including JavaScript, Python, Go, and Java
03Customizable scan configurations for tailored security audits
04Detailed JSON output with line-specific findings and fix suggestions
05Pre-configured rulesets for OWASP Top 10 and CWE Top 25
06Automated vulnerability scanning powered by Semgrep
ユースケース
01Auditing legacy projects for security anti-patterns and sensitive information exposure
02Automating security compliance checks against standard industry frameworks
03Scanning a new codebase for SQL injection and XSS vulnerabilities before deployment