The SARIF Parsing skill enables developers and security engineers to effectively manage static analysis output by providing expert guidance on reading, filtering, and transforming SARIF 2.1.0 data. It facilitates complex tasks such as deduplicating findings across multiple security tools, generating summary reports for CI/CD pipelines, and extracting actionable vulnerability data using tools like jq, pysarif, and sarif-tools. Whether you are normalizing paths across different environments or building custom security dashboards, this skill ensures your analysis results are consistent, stable, and ready for remediation.
주요 기능
010 GitHub stars
02High-performance streaming for large (100MB+) SARIF files
03Automated path normalization and artifact URI resolution
04Advanced result deduplication using stable fingerprinting
05Multi-tool aggregation for unified security reporting
06Standardized SARIF 2.1.0 parsing and schema validation
