Skip to content
store
sast-configuration

Self-hosted alternatives to sast-configuration

5 self-hosted AI Skills apps to use instead, best rated first.

Top picks

  1. C

    claude-to-deerflow

    Get

    claude-to-deerflow is an agent skill that lets an assistant send messages and questions to a running DeerFlow instance through its HTTP API. DeerFlow is an AI agent platform built on LangGraph that orchestrates sub-agents for research, code

    Self-hosted

  2. O

    open-notebook

    Get

    open-notebook is an agent skill for organising research with Open Notebook, a self-hosted alternative to NotebookLM. It arranges sources, notes and AI conversations into research notebooks. Sources can be PDFs, web pages, audio, video and O

    Self-hosted

  3. R

    Reactive Resume

    Get

    Reactive Resume is a free and open-source resume builder for writing resumes and cover letters, checking the work, and tracking job applications. You create a free account, import an existing resume or start from scratch, and see the finish

    Open sourceSelf-hosted

  4. S

    self-hosted-funnel-launch

    Get

    Self-hosted funnel launch is an agent skill that takes a funnel from an empty install to published on infrastructure you control, using the Autonnel funnel builder, which is licensed Apache-2.0. The result covers a landing page, checkout, a

    Self-hosted

  5. G

    get-convex/convex-backend

    Get

    Convex is an open-source reactive database for web app developers. It combines a database, a place to write server functions in pure TypeScript, and client libraries that keep the app's data live, so screens update as the data changes. Beca

    Self-hosted

About sast-configuration

S

sast-configuration

Configure Static Application Security Testing

sast-configuration is an agent skill from the wshobson/agents collection for setting up static application security testing (SAST) tools that find vulnerabilities in application code without running it. It covers Semgrep, SonarQube and CodeQL, and it explains how to configure them across several programming languages. The skill's uses include setting up SAST scanning in CI/CD pipelines so every change is checked, creating custom security rules that match the patterns of your own codebase, configuring quality gates and compliance policies that decide when a build should fail, optimizing scan speed, and reducing false positives so developers keep trusting the results. It also covers combining more than one SAST tool for defense in depth, since each tool catches some issues the others miss. The first section is a Semgrep configuration guide, covering rule files and how to write a custom rule. A static scanner is only useful when its findings are triaged, so the skill's guidance includes making rules specific enough that teams act on what they see. The agent writes the configuration files and rules for a project, and the security team decides which findings block a release. The skill is installed with the skills CLI from the wshobson/agents repository. Its skills.sh page showed about 10.5K installs and passing results from three security audits at the time of the scan.

View sast-configurationAll AI Skills apps
Price
Free
Made by
wshobson
Category
AI Skills
Website
github.com/wshobson/agents/sast-configuration