opensast

Run multi-language Static Application Security Testing for the current repository or selected paths. Use when the user asks to scan code for vulnerabilities, review security issues, analyze Git changes, generate SARIF, triage findings, or prepare CI security gates.

Generate or apply security fixes for SAST findings using a three-tier workflow (template → LLM → verify). Use when the user asks to fix a specific vulnerability found by /sast-scan.

Triage SAST findings with three-phase workflow (auto-bucket → LLM validate → recommend). Use after running /sast-scan when findings need review.

Manage SAST scan baselines with full lifecycle operations (create, update, show, suppress, diff, stats, audit, cleanup, import). Use to suppress accepted risks and focus on new issues.