semgrep
Runs a Semgrep security scan over a codebase: detects languages, selects rulesets, presents the plan for explicit approval, then runs every approved ruleset through scripts/run-scans.sh, which batches the semgrep processes and writes scans.json, and merges the output to SARIF. Supports two scan modes, "run all" for full ruleset coverage and "important only" for security findings at medium-to-high confidence and impact. Uses Semgrep Pro for cross-file taint analysis when it is available. Use whe…
What is this resource?
Runs a Semgrep security scan over a codebase: detects languages, selects rulesets, presents the plan for explicit approval, then runs every approved ruleset through scripts/run-scans.sh, which batches the semgrep processes and writes scans.json, and merges the output to SARIF. Supports two scan modes, "run all" for full ruleset coverage and "important only" for security findings at medium-to-high confidence and impact. Uses Semgrep Pro for cross-file taint analysis when it is available. Use whe…
Review the original project for installation steps, licenses, compatibility and updates. This directory provides discovery links, not downloadable or verified code.
Installation
For repositories supported by the Skills CLI, you can typically start with:
npx skills add trailofbits/skillsCheck the repository instructions and select the intended skill before installing. This command may not apply to every source.
Safety & attribution
This is an external resource, not independently security-audited by this directory. Inspect permissions, scripts and changes before using it with your files or accounts.