skills.rest
marduk191
marduk191COMMUNITY
Explore all skills by this author →
WebsiteGitHub

sarif-parsing

Parse, deduplicate, and analyze SARIF 2.1.0 results from static analysis tools.

9|4|Updated Feb 7, 2026
Search Tags:#security#analysis#deduplication#parsing#ci-cd#sarif
One-click install
npx skills add https://github.com/marduk191/qwen3_mcp --skill sarif-parsing-marduk191
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: sarif-parsing
Source: https://github.com/marduk191/qwen3_mcp/tree/main/skills/static-analysis/skills/sarif-parsing
Command: npx skills add https://github.com/marduk191/qwen3_mcp --skill sarif-parsing-marduk191

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Static analysis SARIF files from multiple tools can be large, noisy, and scattered; this skill provides a structured way to parse, deduplicate, and analyze SARIF data to derive actionable security findings.

Core Features & Use Cases

  • Aggregate SARIF runs from multiple tools into a unified view.
  • Deduplicate findings across runs using stable fingerprints.
  • Extract key findings and generate concise summaries for CI/CD pipelines.
  • Map results to rules and tools for traceability.

Quick Start

Provide a SARIF file path to the parser to generate a structured findings report.

Frequently Asked Questions about sarif-parsing

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I parse SARIF files from multiple static analysis tools into a single report?▼

You can consolidate multiple SARIF runs by providing the file path to the parser, which aggregates them into a unified view and maps results to their originating tools and rules for full traceability.

How does fingerprint-based deduplication work for SARIF security findings?▼

Fingerprint-based deduplication removes duplicate security findings across multiple SARIF runs by comparing stable fingerprints, ensuring the final report contains only unique issues without redundant noise.

Can I filter SARIF results by severity for my CI/CD pipeline?▼

Yes, you can filter SARIF results by severity. The parser extracts key findings, applies severity filters, and generates concise, actionable summaries specifically designed for CI/CD pipeline integration.

Does the SARIF parser support files that do not follow the 2.1.0 structure?▼

No, the parser enforces SARIF 2.1.0 structure compatibility. It robustly handles single-file or multi-run inputs, but files must conform to this specific version to be processed correctly.

What is the best way to consolidate scattered static analysis SARIF outputs?▼

The best way to consolidate scattered SARIF outputs is using a structured parser to deduplicate findings, filter by severity, and derive actionable security summaries from the aggregated static analysis data.

Related Skills

Explore More Data & Analytics Skills→
roderikroderik
2

sarif-parsing

Parse SARIF 2.1.0 files to extract, deduplicate, and summarize findings.

Community
Basic
simplefarmer69simplefarmer69
2

devops-bridge

Integrate GitHub, CI/CD, messaging platforms, and issue trackers to automate developer operations.

Community
Advanced
SuperlendSuperlend

sarif-parsing

Parse SARIF 2.1.0 files and extract structured findings for reporting.

Official
Intermediate
zekiriabdzekiriabd
140

sarif-parsing

Parse SARIF 2.1.0 files to extract, normalize, filter, and compare static analysis findings.

Community
Advanced