Semgrep SAST Scan
code_scanRead-onlyIdempotent
Scan source code for security vulnerabilities like SQL injection and XSS using Semgrep. Get CWE-classified findings with severity levels to fix flaws early.
Instructions
Run SAST (Static Application Security Testing) on source code via Semgrep.
Scans for security flaws: SQL injection, XSS, command injection,
hardcoded credentials, insecure deserialization, path traversal, etc.
Returns findings with CWE classifications and severity levels plus a
typed ``findings``, ``clean``, ``skipped``, or ``failed`` status.
Requires ``semgrep`` on PATH (``pip install semgrep``).
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| path | Yes | Path to source code directory to scan. | |
| config | No | Semgrep config. 'auto' = Semgrep Registry rules. Can be a path or registry string. | auto |
Output Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |