semgrep-sast-scan
Installation
SKILL.md
Semgrep SAST Scan Skill
Run SAST scans on source code repositories using Semgrep Code, connected to the organization's Semgrep AppSec Platform cloud instance.
Prerequisites
Before running a scan, verify the following environment variables are configured. If any are missing, inform the user and point them to the Environment Setup section below.
| Variable | Required | Purpose |
|---|---|---|
SEMGREP_APP_TOKEN |
Yes | Auth token from Semgrep AppSec Platform (Settings > Tokens) |
SEMGREP_APP_URL |
No | Defaults to https://semgrep.dev. Set only for single-tenant deployments. |
SEMGREP_REPO_NAME |
No | Override auto-detected repo name for findings linking |
SEMGREP_TIMEOUT |
No | Per-file scan timeout in seconds (default: 5) |