Original Post: Easily create custom SAST guardrails with human language and Semgrep Assistant (AI)
The content discusses Semgrep’s two-pronged approach to Static Application Security Testing (SAST) through secure guardrails and the Semgrep Assistant with Assistant Memories. Secure guardrails guide developers toward secure coding practices, reducing security vulnerabilities and the workload on AppSec teams. The Semgrep Assistant, utilizing GPT-4, offers autofix solutions for vulnerabilities, while Assistant Memories allows organizations to customize remediation guidance to align with specific coding standards. A real-world example with Flask demonstrates how Assistant Memories helps maintain consistent security practices, such as enforcing secure cookie settings through middleware. This feature enables tailored guidance, reinforcing secure guardrails by aligning remediation advice with specific organizational policies.
Go here to read the Original Post