audit-augmentation

To map SARIF static analysis results onto a code graph, you can use the audit-augmentation skill to integrate findings onto Trailmark code graphs. This enriches the graph structure by visualizing security findings directly within the context of your codebase.

You can integrate weAudit annotations with existing security assessment findings by mapping them onto code graphs. This allows you to combine external audit results from different tools and auditors into a unified view for deeper security insights.

Visualizing static analysis findings in a code graph improves security audits by cross-referencing results with pre-analysis data like blast radius and taint. This contextual mapping enables better analysis and creates subgraphs based on vulnerability severity.

To start augmenting code graphs with SARIF findings, you need the trailmark dependency and a valid SARIF file. You can execute the process via the command line by pointing the augment command to your project path and SARIF results.

You can create subgraphs based on vulnerability severity from SARIF outputs by mapping the findings to specific graph nodes. This enables targeted analysis and better cross-referencing of high-priority security issues within the code structure.