Security · Global library

SAST Pipeline Orchestrator

Orchestrates Static Application Security Testing with multi-tool integration, result correlation, and developer-friendly remediation that catches vulnerabilities early

CodexClaude CodeKimi Codeorchestrator-mcp

Open pack on GitHub Back to catalog

Best use case

Use SAST Pipeline Orchestrator when you need to orchestrates Static Application Security Testing with multi-tool integration, result correlation, and developer-friendly remediation that catches vulnerabilities early, especially when the work is driven by sast and static analysis.

Trigger signals

saststatic analysiscode scanvulnerability

Validation hooks

coverage-checkerfalse-positive-tracker

Install surface

Copy the exact command path you need.

Inspect

pip install "orchestrator-mcp[dashboard]"
orchestrator-mcp skills show sast-orchestrator

Use

orchestrator-mcp skills export sast-orchestrator --to ./skillforge-packs
# copy the exported pack into your preferred agent environment

Export

cp -R skills/sast-orchestrator ./your-agent-skills/sast-orchestrator
# or open skills/sast-orchestrator/SKILL.md in a markdown-first client

File patterns

.github/workflows/*.yml.gitlab-ci.ymlsonar**.py*.java

Model preferences

claude-sonnet-4gpt-4oclaude-haiku-3

Related skills

Adjacent packs to compose next.

Conducts security-focused code reviews with vulnerability detection, secure coding guidance, and knowledge transfer that improves team security awareness

CodexClaude Code

Analyzes open-source dependencies with vulnerability detection, license compliance, and automated remediation that secures the software supply chain

CodexClaude Code

Coordinates comprehensive red team exercises targeting AI systems with automated attack generation, vulnerability discovery, and remediation tracking

CodexClaude Code

Apache-2.0 licensedUse it, fork it, redistribute it. No strings attached.Safety-first by designSecret redaction, release scanning, and no shell execution. Constraints are public.GitHub nativeEvery pack is a real folder. Fork, edit, PR. No hidden backend or proprietary pipeline.

SAST Pipeline Orchestrator

Copy the exact command path you need.

Adjacent packs to compose next.

Secure Code Review Specialist

Software Composition Analysis Expert

AI Red Team Exercise Coordinator