sarif-parsing

Parse SARIF 2.1.0 files to extract, deduplicate, and summarize findings.

2|Updated Jan 21, 2026
One-click install
npx skills add https://github.com/roderik/mpe --skill sarif-parsing
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: sarif-parsing
Source: https://github.com/roderik/mpe/tree/main/.agents/skills/sarif-parsing
Command: npx skills add https://github.com/roderik/mpe --skill sarif-parsing

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

SARIF parsing helps teams read, deduplicate, and report findings from static analysis results to streamline security workflows and CI/CD.

Core Features & Use Cases

  • Parse SARIF files (version 2.1.0) to extract findings across multiple analysis runs.
  • Deduplicate alerts across runs using fingerprints or partialFingerprints for stable tracking.
  • Generate actionable summaries and export data for CI/CD pipelines.

Quick Start

Use the sarif-parsing skill to load a SARIF file named 'results.sarif' and produce a concise summary.

Frequently Asked Questions about sarif-parsing

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I parse SARIF files to extract static analysis findings?

Deduplicating static analysis alerts in SARIF uses fingerprints or partialFingerprints to track findings stably. This parsing skill applies fingerprinting across multiple runs to consolidate cross-run security alerts.

Can I use standard Python to process SARIF reports without extra dependencies?

Summarizing multi-tool SARIF reports consolidates findings from various static analysis runs. This skill parses multiple SARIF 2.1.0 inputs, applies deduplication, and generates actionable summaries for CI/CD pipelines.

What is the best way to deduplicate static analysis alerts across multiple SARIF runs?

Deduplicating static analysis alerts in SARIF uses fingerprints or partialFingerprints to track findings stably. This parsing skill applies fingerprinting across multiple runs to consolidate cross-run security alerts.

Can I use standard Python to process SARIF reports without extra dependencies?

Processing SARIF reports with standard Python is fully supported. This skill handles loading, parsing, and summarizing static analysis findings using only built-in Python libraries, requiring no external dependencies.

How do I summarize multi-tool SARIF reports for CI/CD pipelines?

Summarizing multi-tool SARIF reports consolidates findings from various static analysis runs. This skill parses multiple SARIF 2.1.0 inputs, applies deduplication, and generates actionable summaries for CI/CD pipelines.