Skills
.Work. You
Rest

binskim-analysis

Official

Explain BinSkim SDL results.

Software Engineering#security#analysis#guardian#portal#sdl#sarif#binskim
Authordotnet
Version1.0.0
Installs0

System Documentation

What problem does it solve?

Investigate BinSkim SDL findings from official pipelines — understand Guardian filtering, compare raw vs merged SARIF, decode portal results, and determine fix ownership.

Core Features & Use Cases

  • Portal result interpretation: Compare raw BinSkim findings (binskim.sarif) with Guardian-merged results (Results.sarif) to understand what is visible in the central portal.
  • Discrepancy analysis: Identify why certain findings appear in the portal while others are filtered, and determine whether a finding is policy-mapped for SDL.
  • Ownership guidance: Assess whether a finding can be fixed in the repository or requires upstream/vendor action, aiding triage and remediation planning.

Quick Start

Load the official SDL artifacts and compare raw BinSkim results with the Guardian-filtered Results.sarif to explain portal reporting.

Dependency Matrix

Required Modules

None required

Components

Standard package

💻 Claude Code Installation

Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.

Please help me install this Skill:
Name: binskim-analysis
Download link: https://github.com/dotnet/arcade-skills/archive/main.zip#binskim-analysis

Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
View Source Repository

Agent Skills Search Helper

Install a tiny helper to your Agent, search and equip skill from 471,000+ vetted skills library on demand.