Skip to content

docs: add SAST and Semgrep guidance - #220

Merged
jgadsden merged 2 commits into
OWASP:mainfrom
dannydj:issue-88-sast
Oct 21, 2026
Merged

jgadsden merged 2 commits into
OWASP:mainfrom
dannydj:issue-88-sast

Conversation

@dannydj

@dannydj dannydj commented Oct 20, 2026

Copy link
Copy Markdown

Summary:

Closes #88

Adds a new Static Analysis section under Implementation, including an introductory SAST overview and a Semgrep Community Edition page with basic usage, rules and patterns, taint analysis, workflow integration, limitations, and references.

Description for the changelog:

Add SAST guidance and Semgrep Community Edition documentation.

Declaration:

  • content meets the license for this project
  • you have read the contribution guide and agree to the Code of Conduct
  • either no AI-generated content has been used in this pull request
  • or any use of AI in this pull request has been disclosed below:
    • AI Tools: [e.g. GitHub CoPilot, ChatGPT, JetBrains Junie, etc]
    • LLMs and versions: [e.g. GPT-4.1, Claude Haiku 4.5, Gemini 2.5 Pro, etc]
    • Prompts: [Summarize the key prompts or instructions given to the AI tools]

@jgadsden

Copy link
Copy Markdown
Contributor

thanks @dannydj , contribution greatly appreciated
can you fix up the file .wordlist.txt for the spellcheck (suggest that MacOS is used instead of macOS ):

docs/en/05-implementation/05-static-analysis/01-semgrep.md:
CLI
Homebrew
metavariable

and there are some markdown lint changes needed

@jgadsden jgadsden left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Great to have this, many thanks @dannydj
I will go ahead and merge, and it will go live immediately 🥇

@jgadsden
jgadsden merged commit 96c7738 into OWASP:main Oct 21, 2026
7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Include a section on SAST

3 participants