sast-configuration

Configure SAST tools for automated vulnerability detection across multiple languages and CI/CD pipelines. Static Application Security Testing (SAST) tool setup, configuration, and custom rule creation for comprehensive security scanning across multiple programming languages. This skill provides comprehensive guidance for setting up and configuring SAST tools including Semgrep, SonarQube, and CodeQL. Use this skill when you need to: Start with Baseline Incremental Adoption False Positive Management Performance Optimization Team Enablement - Covers three major SAST platforms: Semgrep (custom pattern-based rules), SonarQube (quality gates and code coverage), and CodeQL (GitHub Advanced Security integration) - Includes CI/CD integration patterns for GitHub Actions, GitLab CI, and Jenkins, plus pre-commit hook setup for early detection - Provides production-ready configuration templates, custom rule examples, and performance optimization strategies for large codebases - Addresses false positive management, compliance scanning (PCI-DSS, SOC 2), and team enablement workflows - Set up SAST scanning in CI/CD pipelines - Create custom security rules for your codebase - Configure quality gates and compliance policies - Optimize scan performance and reduce false positives - Integrate multiple SAST tools for defense-in-depth - Custom rule creation with pattern matching - Language-specific...