glog

Scan codebases, validate SARIF results, and generate remediation reports.

Updated Feb 16, 2026
One-click install
npx skills add https://github.com/glogai/glog-skills --skill glog
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: glog
Source: https://github.com/glogai/glog-skills/tree/main/glog
Command: npx skills add https://github.com/glogai/glog-skills --skill glog

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Automates the Glog.AI scan, SARIF validation, and focused remediation workflow so teams surface actionable findings without altering unrelated code.

Core Features & Use Cases

  • Automated scanning with SARIF validation for the current repository to surface genuine findings.
  • Generates a .glog remediation report, cleans temporary artifacts, and preserves SARIF output.
  • Supports remediation strategies (local or pr-per-finding) and optional language targeting for the scan.

Quick Start

Run the glog skill to perform a scan and generate remediation guidance for the current repository.

Frequently Asked Questions about glog

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate codebase scanning and SARIF validation for security findings?▼

To automate codebase scanning and SARIF validation, run the Glog workflow which generates a .glog remediation report and preserves the glog-scan.sarif output in your project root without applying unrelated refactors.

What is focused remediation in code quality automation?▼

Focused remediation applies targeted fixes to genuine security findings while avoiding unrelated refactors. It supports local or pr-per-finding strategies to ensure code quality improvements remain isolated from unrelated code.

Do I need environment tokens to run a Glog scan?▼

Yes, running a Glog scan requires environment setup and specific tokens including GLOG_CLIENT, GLOG_ENV, GITHUB_TOKEN, and GITHUB_USER to authenticate and execute the automated codebase scanning workflow successfully.

What files does the Glog workflow output to the project root?▼

The Glog workflow outputs .glog/glog-scan.sarif and .glog/glog-remediation-report.md to the project root. It cleans temporary artifacts while preserving these SARIF results and remediation guidance files.

Can I target a specific programming language during a repository scan?▼

Yes, the automated repository scan supports optional language targeting to focus the SARIF validation and remediation strategy on specific programming languages within your codebase.