sarif-parsing

Parse SARIF files to normalize, deduplicate, and summarize static analysis findings.

77|3|Updated Mar 24, 2026
One-click install
npx skills add https://github.com/FlorianBruniaux/starmapper --skill sarif-parsing-florianbruniaux
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: sarif-parsing
Source: https://github.com/FlorianBruniaux/starmapper/tree/main/.claude/plugins/static-analysis/skills/sarif-parsing
Command: npx skills add https://github.com/FlorianBruniaux/starmapper --skill sarif-parsing-florianbruniaux

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

SARIF parsing and processing to normalize, deduplicate, and summarize findings from static analysis tools.

Core Features & Use Cases

  • Parse SARIF files from multiple tools
  • Deduplicate findings using stable fingerprints
  • Aggregate and summarize results across runs and tools
  • Integrate into CI/CD workflows and convert to other formats

Quick Start

Provide a SARIF file path to parse, deduplicate, and summarize findings.

Frequently Asked Questions about sarif-parsing

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I deduplicate SARIF findings from multiple static analysis tools?

Deduplicate SARIF findings by parsing files from multiple static analysis tools and using stable fingerprints to identify and remove duplicate results across runs. This normalizes and aggregates findings into a single output.

What is the best way to aggregate static analysis results across different CI/CD runs?

Aggregate static analysis results by parsing SARIF files produced across different CI/CD runs. This process normalizes findings, applies fingerprint-based deduplication, and summarizes the aggregated results for review.

Can I convert SARIF files to other formats for CI/CD pipeline integration?

You can convert SARIF files to other formats during CI/CD pipeline integration. The parser normalizes and processes static analysis findings, supporting conversion to integrate with downstream security and quality workflows.

Does SARIF parsing validate schema and handle optional fields safely?

SARIF parsing validates the schema and handles optional fields safely. It enforces safe-data handling while processing static analysis results to ensure normalized and deduplicated findings without losing optional data.

Why do I need a separate parser for SARIF files instead of using my scanner directly?

You need a separate parser for SARIF files because it remains distinct from scanners. It normalizes, deduplicates, and summarizes findings from multiple tools, whereas scanners only produce raw results.