This tool is no longer present in the server's latest manifest. Showing the last observed version (server version 4.97.1).

semgrep-sast

Inactive

Tool of The Stall

declared in 4.97.1

SAST security scan on a public GitHub repo using Semgrep. Returns findings with file, line, severity, rule ID, and CWE. Covers OWASP Top 10, injection, auth flaws, cryptographic misuse, and 1 000+ rules across Python, JS/TS, Go, Java, Ruby, PHP, C/C++. Input: owner/repo. Up to 100 findings; scan takes 20–120 s depending on repo size.

Parameters schema

{
  "type": "object",
  "$schema": "http://json-schema.org/draft-07/schema#",
  "required": [
    "github_repo"
  ],
  "properties": {
    "ruleset": {
      "type": "string",
      "description": "Semgrep ruleset. 'auto' (default) applies best-match rules for the detected language stack. 'security-audit' targets common vuln classes. 'owasp-top-ten' focuses on OWASP Top 10."
    },
    "github_repo": {
      "type": "string",
      "description": "Public GitHub repo in 'owner/repo' format (e.g. 'expressjs/express'). Must be publicly accessible without authentication."
    }
  },
  "additionalProperties": false
}

What this tool wraps· 1 endpoint

min confidence0.70 0.50

Data resourceYouTube Data API
Google · media
name mention0.60

Parent server

The Stall

1/7 registries

View full server →