skills.rest
lidge-jun
lidge-junCOMMUNITY
Explore all skills by this author →
𝕏@claudeebumGitHub

sarif-parsing

Parse, analyze, and aggregate SARIF files from security tools.

5|Updated Feb 26, 2026
Search Tags:#ci/cd#static analysis#security analysis#reporting#vulnerability management#sarif
One-click install
npx skills add https://github.com/lidge-jun/cli-jaw-skills --skill sarif-parsing-lidge-jun
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: sarif-parsing
Source: https://github.com/lidge-jun/cli-jaw-skills/tree/main/static-analysis/skills/sarif-parsing
Command: npx skills add https://github.com/lidge-jun/cli-jaw-skills --skill sarif-parsing-lidge-jun

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps you understand, process, and leverage SARIF files, which are crucial for analyzing the output of static analysis security tools.

Core Features & Use Cases

  • Parse and Analyze: Read and interpret complex SARIF files generated by security scanners.
  • Aggregate Findings: Combine results from multiple tools into a unified view.
  • Deduplicate Alerts: Identify and remove duplicate security findings.
  • Extract Vulnerabilities: Isolate specific types of vulnerabilities for focused review.
  • CI/CD Integration: Automate security reporting and analysis within your pipelines.
  • Use Case: You have SARIF reports from Semgrep and CodeQL. Use this Skill to merge them, identify unique high-severity findings, and generate a summary report for your development team.

Quick Start

Use the sarif-parsing skill to count the total number of error-level findings in the file 'scan-results.sarif'.

Frequently Asked Questions about sarif-parsing

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I parse and merge SARIF files from multiple security tools?▼

To merge SARIF files from multiple security tools, you can parse and aggregate the findings to create a unified view. This process combines results from various static analysis scanners while deduplicating redundant alerts.

What is the best way to extract specific high-severity vulnerabilities from a SARIF report?▼

Extracting specific vulnerabilities from a SARIF report involves parsing the file to isolate targeted findings. You can filter the static analysis results by severity level to focus on high-priority security issues for review.

Can I integrate SARIF analysis into my CI/CD pipeline for automated reporting?▼

Yes, you can integrate SARIF analysis into CI/CD pipelines to automate security reporting. This allows you to process static analysis findings continuously and generate summary reports directly within your automated workflows.

Does SARIF parsing work with jq and pysarif for processing static analysis results?▼

SARIF parsing supports various tools including jq, pysarif, and sarif-tools for comprehensive analysis. These utilities help you read, interpret, and process complex SARIF files generated by security scanners.

Why do I need to deduplicate alerts when aggregating SARIF findings?▼

Deduplicating alerts when aggregating SARIF findings is necessary because multiple security tools often identify the same vulnerability. Removing duplicate security findings ensures your development team reviews only unique alerts.

How do I count the total number of error-level findings in a SARIF file?▼

Counting error-level findings in a SARIF file requires parsing the static analysis results to tally occurrences of specific severity levels. This extracts precise vulnerability metrics for security reporting.

Related Skills

Explore More Software Engineering Skills→
zekiriabdzekiriabd
140

sarif-parsing

Parse SARIF 2.1.0 files to extract, normalize, filter, and compare static analysis findings.

Community
Advanced
vigoliumvigolium
965

sarif-parsing

Convert SARIF static analysis outputs into deduplicated findings for CI/CD gating.

Official
Intermediate
SuperlendSuperlend

sarif-parsing

Parse SARIF 2.1.0 files and extract structured findings for reporting.

Official
Intermediate
jal-cojal-co
143

frontend-design

Generate distinctive frontend interfaces with custom typography and cohesive color themes.

Community
Advanced