skills.rest
AidenSbVevo
AidenSbVevoCOMMUNITY
Explore all skills by this author →
GitHub

sarif-parsing

Process and analyze SARIF 2.1.0 static analysis results to identify and deduplicate security vulnerabilities.

1|Updated Jul 5, 2026
Search Tags:#automation#static analysis#security#vulnerability#codeql#semgrep#sarif
One-click install
npx skills add https://github.com/AidenSbVevo/claude-code-starter --skill sarif-parsing-aidensbvevo
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: sarif-parsing
Source: https://github.com/AidenSbVevo/claude-code-starter/tree/main/skills/tob-static-analysis/skills/sarif-parsing
Command: npx skills add https://github.com/AidenSbVevo/claude-code-starter --skill sarif-parsing-aidensbvevo

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires jq, pysarif, sarif-tools, ijson, jsonschema, and includes references (resource) components.

What problem does it solve?

This skill simplifies the complex task of interpreting, filtering, and aggregating security findings from static analysis tools like CodeQL and Semgrep, turning raw scan data into actionable insights.

Core Features & Use Cases

  • Result Aggregation: Combine findings from multiple security scanners into a unified report.
  • Deduplication & Filtering: Remove false positives and filter alerts by severity or rule ID to focus on critical vulnerabilities.
  • CI/CD Integration: Automate the process of failing builds based on new high-severity findings or regression detection.

Quick Start

Use the sarif-parsing skill to aggregate all findings from the provided scan files and generate a summary report of high-severity errors.

Frequently Asked Questions about sarif-parsing

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I aggregate security findings from multiple static analysis tools into a single report?▼

To aggregate static analysis findings, you can process multiple SARIF 2.1.0 scan files to combine results from tools like CodeQL and Semgrep into a unified, structured report. This skill programmatically merges run data to provide a consolidated view of vulnerabilities.

What is the best way to filter static analysis alerts by severity or rule ID?▼

The best way to filter static analysis alerts is by processing SARIF 2.1.0 data to programmatically isolate findings based on severity levels or specific rule IDs. This allows you to focus on critical vulnerabilities and remove false positives from the scan results.

Can I use SARIF parsing to fail a CI/CD pipeline based on new high-severity vulnerabilities?▼

Yes, you can use SARIF parsing to fail CI/CD pipelines by integrating automated quality gating logic that evaluates processed scan results. The skill identifies new high-severity findings and triggers build failures based on your defined security thresholds.

Does this skill support stable fingerprinting and path normalization for security findings?▼

Yes, this skill supports stable fingerprinting and path normalization for security findings. It processes SARIF 2.1.0 data to ensure consistent vulnerability tracking and deduplication across multiple scan runs by normalizing file paths and generating stable identifiers.

What static analysis tools generate compatible SARIF 2.1.0 scan results for this processing skill?▼

Static analysis tools like CodeQL and Semgrep generate compatible SARIF 2.1.0 scan results. This skill processes the standardized SARIF output from these security scanners to identify, filter, and deduplicate vulnerabilities across different tools.

Related Skills

Explore More Software Engineering Skills→
zekiriabdzekiriabd
140

sarif-parsing

Parse SARIF 2.1.0 files to extract, normalize, filter, and compare static analysis findings.

Community
Advanced
camelranchentertainmentcamelranchentertainment
1

security-reviewer

Identify security vulnerabilities in code, dependencies, and configurations.

Community
Advanced
Avi977Avi977

sarif-parsing

Parse and deduplicate SARIF files from static analysis tools for CI/CD reporting.

Community
Advanced
SuperlendSuperlend

sarif-parsing

Parse SARIF 2.1.0 files and extract structured findings for reporting.

Official
Intermediate