Integrates CodeQL and Semgrep SAST scanning into GitHub Actions, covering scans on pull requests/pushes, rule tuning to cut false positives, SARIF upload to GitHub Advanced Security, and merge-blocking quality gates for high-severity findings. Use when adding automated code vulnerability detection to CI, enforcing consistent SAST org-wide, or producing SOC 2/PCI DSS/NIST SSDF compliance evidence.
安装
npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill integrating-sast-into-github-actions-pipelinenpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill integrating-sast-into-github-actions-pipeline -a claude-code -gnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill integrating-sast-into-github-actions-pipeline -a codex -ggemini skills install https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git --path skills/integrating-sast-into-github-actions-pipelinegh skill install mukul975/Anthropic-Cybersecurity-Skills integrating-sast-into-github-actions-pipelinegit clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills /tmp/mukul975__Anthropic-Cybersecurity-Skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/integrating-sast-into-github-actions-pipeline ~/.claude/skills/integrating-sast-into-github-actions-pipeline # Claude Code
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/integrating-sast-into-github-actions-pipeline ~/.agents/skills/integrating-sast-into-github-actions-pipeline # Codex, Cursor, Gemini CLI, Copilot, OpenCode