sast-configuration
Static Application Security Testing (SAST) tool setup, configuration, and custom rule creation for comprehensive security scanning across multiple programming languages.
Best for CI/CD pipeline security int…Works with GitHub
⌘source
- author
@sickn33- language
- Python
★34kstars
5.6kforks
Apr 18, 2026
✦overview.md
Key Features
- ·SAST tool setup and configuration
- ·Custom security rule creation
- ·Multi-language scanning support
- ·CI/CD pipeline integration
- ·False positive reduction and tuning
- ·Compliance policy configuration
Use Cases
- →Setting up SAST scanning in CI/CD pipelines
- →Creating custom security rules for specific codebases
- →Configuring quality gates and compliance policies
- →Optimizing scan performance by reducing false positives
- →Integrating multiple SAST tools for layered security
Best for
- ✓CI/CD pipeline security integration
- ✓Security teams implementing SAST
- ✓Compliance-focused development
Not ideal for
- !DAST or manual penetration testing
- !Projects without source code access
- !Organizational policy decision-making
FAQs
name
sast-configuration
description
Static Application Security Testing (SAST) tool setup, configuration, and custom rule creation for comprehensive security scanning across multiple programming languages.
risk:unknown
source:community
date_added:2026-02-27
SAST Configuration
Static Application Security Testing (SAST) tool setup, configuration, and custom rule creation for comprehensive security scanning across multiple programming languages.
Use this skill when
- Set up SAST scanning in CI/CD pipelines
- Create custom security rules for your codebase
- Configure quality gates and compliance policies
- Optimize scan performance and reduce false positives
- Integrate multiple SAST tools for defense-in-depth
Do not use this skill when
- You only need DAST or manual penetration testing guidance
- You cannot access source code or CI/CD pipelines
- You need organizational policy decisions rather than tooling setup
Instructions
- Identify languages, repos, and compliance requirements.
- Choose tools and define a baseline policy.
- Integrate scans into CI/CD with gating thresholds.
- Tune rules and suppressions based on false positives.
- Track remediation and verify fixes.
Safety
- Avoid scanning sensitive repos with third-party services without approval.
- Prevent leaks of secrets in scan artifacts and logs.
Overview
$install
1-click copynpx skills add sickn33/antigravity-awesome-skills --skill sast-configurationSafety assessment
★
Clarity score
How clear and easy to understand the SKILL.md instructions are, rated from 1 to 5.
4/ 5
very goodClear and well structured, with only minor parts that might need a second read.
◎
Actionability score
How directly an agent can act on the SKILL.md instructions, rated from 1 to 5.
4/ 5
highMostly actionable with clear steps; only a few small gaps remain.