Adds **sast-mcp-server** to the 🔒 Security section.
A production-grade SAST/DAST MCP server that gives any agent the ability to
scan code for vulnerabilities and remediate them:
- **11 scanners** — Bandit, njsscan, Bearer, Semgrep, Trivy, CodeQL, Checkov,
Gitleaks, OSV-Scanner, Grype, OWASP ZAP
- **Closed-loop remediation** — applies a patch, re-scans, and verifies the
finding is actually gone (auto-rollback on failure)
- **Vendor-neutral** — imports external SARIF (Snyk/Veracode/etc.) into a
normalized, deduplicated pipeline
- **Supply chain** — container image scanning + CycloneDX/SPDX SBOM with VEX
- **Reporting** — OWASP/SANS/PCI/CIS compliance, HTML/PDF, baselines
- Listed in the official MCP Registry as `io.github.Skyrxin/sast-mcp-server`
Install: `uvx sast-mcp-server` · MIT · Python 3.10+
