audit-augmentation

You can map SARIF static analysis findings onto a code graph by importing results from Semgrep or CodeQL. The Skill projects these findings onto Trailmark code graph nodes using file and line overlap matching.

Yes, you can import weAudit annotations to track manual security reviews. The Skill augments code graphs with weAudit files, enabling human-in-the-loop tracking alongside automated static analysis findings.

Mapping security vulnerabilities to a code graph helps prioritize remediation by cross-referencing findings with pre-analysis data. The Skill creates severity-based subgraphs to visualize vulnerabilities within application architecture context.

Yes, the trailmark library is required to perform graph augmentation and query operations. The Skill depends on trailmark to map external audit findings onto code graph nodes by file and line overlap.

Yes, it works with Semgrep and CodeQL SARIF output files. The Skill automatically maps SARIF-compliant static analysis tool results onto your code graph by matching file and line overlaps.

The best way to visualize static analysis results within application architecture is augmenting a code graph with SARIF findings. This bridges security vulnerabilities and code structure, creating severity-based subgraphs for contextual analysis.