← AppSec on this origin

Static Analysis (SAST)

Semgrep shift-left gate on every push and pull request — GitHub Actions publishes a summary artifact on this origin. Summary only: not a live scanner and no full Semgrep history.

Pipeline

Trigger
sast.yml on push and PR
Scanner
Semgrep over src/ + functions/
Artifact
public/security/sast.json
Config
/api/sast-config · public/security/sast.config.json
Demo scan
Semgrep on security/demo/ with .semgrep/demo-owasp.yml
Semgrep summary

Loading SAST evidence…