Parse and analyze SARIF security findings for triage and CI/CD integration.
npx skills add https://github.com/erenisiklar/Pusula --skill sarif-parsing-erenisiklar
Please help me install this Agent Skill. Skill: sarif-parsing Source: https://github.com/erenisiklar/Pusula/tree/main/.claude/skills/sarif-parsing Command: npx skills add https://github.com/erenisiklar/Pusula --skill sarif-parsing-erenisiklar
SARIF files from static analysis tools can be verbose and inconsistent, making triage, deduplication, and cross-tool reporting slow. This skill provides structured parsing, aggregation, and workflow-ready outputs to streamline security findings review and CI/CD integration.
Load a SARIF file (e.g., results.sarif) and get a concise summary of findings by severity and affected files.
High-intent search queries and answers about installing and using this skill.
You can parse and deduplicate SARIF findings by aggregating multi-tool outputs, applying stable fingerprinting to track regressions, normalizing file paths, and generating reports via Python tooling or jq CLI.
The best way to summarize SARIF static analysis results by severity is using jq CLI for quick exploration or Python-based tools like pysarif and sarif-tools for programmatic filtering and reporting.
Yes, you can validate SARIF files against version 2.1.0 and easily merge or diff results across multiple runs while safely handling optional fields for consistent cross-tool reporting.
Yes, SARIF parsing supports CI/CD integration by providing workflow-ready outputs, stable fingerprinting for regression tracking, and normalized file paths to automate security findings triage.
SARIF parsing fails with optional fields because static analysis tools produce inconsistent outputs; safe handling of optional SARIF fields is required to aggregate runs and normalize file paths without errors.
manuelbrandner85Parse SARIF 2.1.0 results and aggregate security findings by severity.
sbknanaParse SARIF files to deduplicate findings and generate structured reports.
SuperlendParse SARIF 2.1.0 files and extract structured findings for reporting.
igbuendAnalyze SARIF 2.1.0 files to generate vulnerability reports with CVSS scoring.
