cyber-integrating-sast-into-github-actions-pipeline

name	cyber-integrating-sast-into-github-actions-pipeline
description	This skill covers integrating Static Application Security Testing (SAST) tools—CodeQL and Semgrep—into GitHub Actions CI/CD pipelines. It addresses configuring automated code scanning on pull requests and pushes, tuning rules to reduce false positives, uploading SARIF results to GitHub Advanced Security, and establishing quality gates that block merges when high-severity vulnerabilities are detect
hide	true

YURI skill adapter

Authoritative source: .claude/skills/cyber-integrating-sast-into-github-actions-pipeline/SKILL.md

Authoritative source SHA-256: 041f32e0af83be13b28d1fe76423948e6337de13203481ec8c31aa49d10969df

Source class: cyber-armed

Before acting, read the authoritative source file above completely from beginning to end. If the governed source is absent, run node _SYSTEM/Scripts/skill-recall.mjs --show cyber-integrating-sast-into-github-actions-pipeline and read its complete verified output. Follow that source as the skill body; this adapter is a non-authoritative metadata-and-pointer projection.