Security · Skill
SAST Configuration
Configure Static Application Security Testing (SAST) tools for automated vulnerability detection in application code. Use when setting up security scanning, implementing DevSecOps practices, or automating code vulnerability detection.
Open in PhởWhat the skill covers
The sections of its instructions, in order.
- 01 Overview
- 02 Core Capabilities
- 1. Semgrep Configuration
- 2. SonarQube Setup
- 3. CodeQL Analysis
- 03 Quick Start
- Initial Assessment
- Basic Setup
- 04 Integration Patterns
- CI/CD Pipeline Integration
- Pre-commit Hook
- 05 Best Practices
- 06 Common Use Cases
- New Project Setup
- Custom Rule Development
- Compliance Scanning
- 07 Troubleshooting
- High False Positive Rate
- Performance Issues
- Integration Failures
More in Threat modeling
- Attack Tree Construction
Build comprehensive attack trees to visualize threat paths. Use when mapping attack scenarios, identifying defense gaps, or communicating security risks to stakeholders.
- Security Requirement Extraction
Derive security requirements from threat models and business context. Use when translating threats into actionable requirements, creating security user stories, or building…
- STRIDE Analysis Patterns
Apply STRIDE methodology to systematically identify threats. Use when analyzing system security, conducting threat modeling sessions, or creating security documentation.
- Threat Mitigation Mapping
Map identified threats to appropriate security controls and mitigations. Use when prioritizing security investments, creating remediation plans, or validating control…
Similar security skills
Frequently asked questions
What does SAST Configuration do?
Configure Static Application Security Testing (SAST) tools for automated vulnerability detection in application code. Use when setting up security scanning, implementing DevSecOps practices, or automating code vulnerability detection.
Is SAST Configuration free to use?
Yes. SAST Configuration is published by Seth Hobson under the MIT licence, and you can use it with a free Phở account.
How do I use SAST Configuration in Phở?
Press Open in Phở, then Try to apply it to your next message, or add the Threat modeling set so Phở loads it whenever a request matches.
Does SAST Configuration need other tools?
No. It works in a normal Phở chat with what you type or upload.
Copied unchanged from wshobson/agents at commit 7e2fb55 and credited to Seth Hobson, who is not affiliated with Phở. The full instructions and licence text ship with the skill inside Phở.