sarif-parsing

To parse SARIF files and deduplicate static analysis findings, extract structured fields like rule IDs and severities, applying stable fingerprinting and path normalization to track regressions across multiple CI/CD runs.

Stable fingerprinting in SARIF processing is the mechanism used to uniquely identify and deduplicate security findings across multiple static analysis runs, enabling accurate regression tracking and clean CI/CD reporting.

Yes, you can aggregate SARIF 2.1.0 logs from multiple static analysis tools. This skill processes combined results to extract rule IDs, severities, and file paths, generating deduplicated datasets for CI/CD risk reporting.

The best way to extract rule IDs and severities from SARIF for analytics is using the provided Python and jq-based workflow templates, which parse the SARIF structure and output clean, structured data for alerts and dashboards.

Common pitfalls when normalizing file paths in SARIF logs include inconsistent path formatting across different static analysis tools, which can cause deduplication failures and inaccurate regression tracking if not properly standardized.