sast-analysis

# SAST Analysis - Multi-Language Security Scanner Static Application Security Testing (SAST) skill for comprehensive vulnerability detection across multiple programming languages. --- ## Supported Languages | Language | Primary Tool | Fallback | |----------|-------------|----------| | Python | Semgrep + Bandit | Pattern matching | | JavaScript/TypeScript | Semgrep + ESLint | Pattern matching | | Go | Semgrep | Pattern matching | | Java | Semgrep | Pattern matching | | Ruby | Semgrep | Pattern matching | | PHP | Semgrep | Pattern matching | | C/C++ | Semgrep | Pattern matching | | All others | Semgrep auto-detect | Pattern matching | --- ## Prerequisites Check **ALWAYS run this check before analysis:** ```bash echo "=== SAST Tools Availability ===" command -v semgrep >/dev/null 2>&1 && echo "OK: semgrep $(semgrep --version 2>/dev/null | head -1)" || echo "MISSING: semgrep (primary tool)" command -v bandit >/dev/null 2>&1 && echo "OK: bandit (Python)" || echo "OPTIONAL: bandit (Python-specific)" command -v eslint >/dev/null 2>&1 && echo "OK: eslint (JavaScript)" || echo "OPTIONAL: eslint (JS-specific)" command -v jq >/dev/null 2>&1 && echo "OK: jq" || echo "OPTIONAL: jq (JSON formatting)" ``` ### Installation ```bash # Semgrep (required - supports all languages) pip install semgrep # or: brew install semgrep # Python-specific (optional) pip install bandit # JavaScript-specific (optional) npm install -g eslint @eslint/js ``` --- ## Universal Scan: Semgrep Auto-Dete...