skills.rest
jakubciszak
jakubciszakCOMMUNITY
Explore all skills by this author →
GitHub

sarif-parsing

Parse, deduplicate, and aggregate SARIF 2.1.0 findings across multiple runs.

1|Updated Dec 10, 2025
Search Tags:#security#deduplication#parsing#static-analysis#ci-cd#fingerprinting#sarif
One-click install
npx skills add https://github.com/jakubciszak/family-plan --skill sarif-parsing-jakubciszak
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: sarif-parsing
Source: https://github.com/jakubciszak/family-plan/tree/main/.claude/skills/external/static-analysis/skills/sarif-parsing
Command: npx skills add https://github.com/jakubciszak/family-plan --skill sarif-parsing-jakubciszak

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Parse, analyze, and process SARIF files to extract, deduplicate, and summarize findings across multiple runs, enabling a single source of truth for security results.

Core Features & Use Cases

  • SARIF parsing: read SARIF 2.1.0 logs from multiple tools and runs.
  • Deduplication: remove duplicate findings using fingerprints and partialFingerprints.
  • Aggregation & Reporting: aggregate results by file, rule, and severity for CI/CD dashboards.
  • Use Case: integrate SARIF data into code-scanning pipelines, generate concise summaries for security reviews, and compare baseline vs current results.

Quick Start

Run a SARIF extraction to generate a concise findings summary from results.sarif.

Frequently Asked Questions about sarif-parsing

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I deduplicate SARIF findings from multiple static analysis tools?▼

SARIF parsing normalizes static analysis logs from multiple tools by applying fingerprints and partialFingerprints to remove duplicate alerts. It aggregates results across runs to produce a single source of truth for security findings.

What is the best way to aggregate SARIF results for CI/CD pipelines?▼

The best way to aggregate SARIF results for CI/CD pipelines is by parsing multi-tool logs and grouping findings by file, rule, and severity. This provides concise summaries and a stable data view for automated security dashboards.

Can I use this to compare baseline vs current SARIF results in code scanning?▼

Yes, the Skill normalizes static analysis data across runs, allowing you to compare baseline vs current SARIF results in code scanning. It tracks finding changes and generates concise summaries for security reviews.

Does this Skill support parsing SARIF 2.1.0 logs from multiple runs?▼

Yes, the Skill supports parsing SARIF 2.1.0 logs from multiple tools and runs. It reads standard static analysis interchange format files, normalizes the data, and prepares a unified output for CI/CD workflows.

Why do I need to normalize SARIF data before integrating it into dashboards?▼

Normalizing SARIF data ensures stable extraction and defensive processing of results from diverse static analysis tools. Consistent fingerprinting and deduplication prevent duplicate alerts from skewing CI/CD dashboard metrics.

When should I use a dedicated SARIF parser instead of raw static analysis output?▼

Use a dedicated SARIF parser when multi-tool static analysis outputs require deduplication and aggregation. It provides the stable extraction and defensive processing required for automated CI/CD workflows that raw outputs lack.

Related Skills

Explore More Software Engineering Skills→
manuelbrandner85manuelbrandner85

sarif-parsing

Parse SARIF 2.1.0 results and aggregate security findings by severity.

Community
Advanced
idchain-worldidchain-world
16

sarif-parsing

Parse SARIF 2.1.0 analysis results and deduplicate findings by fingerprint.

Official
Advanced
SuperlendSuperlend

sarif-parsing

Parse SARIF 2.1.0 files and extract structured findings for reporting.

Official
Intermediate
zekiriabdzekiriabd
140

sarif-parsing

Parse SARIF 2.1.0 files to extract, normalize, filter, and compare static analysis findings.

Community
Advanced