semgrep-secret-scan
Installation
SKILL.md
Semgrep Secrets Scan Skill
Run secrets detection scans on source code repositories using Semgrep Secrets, connected to the organization's Semgrep AppSec Platform cloud instance. Semgrep Secrets uses semantic analysis, improved entropy analysis, and HTTP validation to accurately surface sensitive credentials in code.
Prerequisites
Before running a scan, verify the following environment variables are configured. If any are missing, inform the user and point them to the Environment Setup section below.
| Variable | Required | Purpose |
|---|---|---|
SEMGREP_APP_TOKEN |
Yes | Auth token from Semgrep AppSec Platform (Settings > Tokens) |
SEMGREP_APP_URL |
No | Defaults to https://semgrep.dev. Set only for single-tenant deployments. |
SEMGREP_REPO_NAME |
No | Override auto-detected repo name for findings linking |