skills.rest
mejango
mejangoCOMMUNITY
Explore all skills by this author →
𝕏@me_jangoGitHub

sarif-parsing

Parse SARIF 2.1.0 files to extract and deduplicate findings.

Updated Jan 17, 2026
Search Tags:#deduplication#parsing#static-analysis#ci-cd#sarif#tool-aggregation#security-findings
One-click install
npx skills add https://github.com/mejango/juicy-vision --skill sarif-parsing-mejango
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: sarif-parsing
Source: https://github.com/mejango/juicy-vision/tree/main/.claude/plugins/static-analysis/skills/sarif-parsing
Command: npx skills add https://github.com/mejango/juicy-vision --skill sarif-parsing-mejango

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

SARIF files from multiple static analysis tools can produce noisy, duplicate findings. This Skill helps you parse, analyze, and deduplicate SARIF findings to produce a clean, actionable view.

Core Features & Use Cases

  • Parse SARIF 2.1.0 results and extract findings across runs and tools.
  • Deduplicate alerts using fingerprints and stable identifiers.
  • Aggregate results for CI/CD pipelines or reporting, and convert data for dashboards.

Quick Start

Run the Python utility to process a SARIF file: python resources/sarif_helpers.py results.sarif

Frequently Asked Questions about sarif-parsing

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I deduplicate SARIF findings from multiple static analysis tools?▼

You can deduplicate SARIF findings by parsing files to extract alerts and removing duplicates using fingerprints and stable identifiers. This aggregates results across multiple runs and tools to produce a clean, actionable view.

What is the best way to aggregate static analysis results for a CI/CD pipeline?▼

Aggregating static analysis results for CI/CD pipelines involves parsing SARIF 2.1.0 files across runs, deduplicating findings, and preparing the normalized data for downstream reporting or dashboards.

How do I parse and normalize locations in a SARIF 2.1.0 file?▼

Parsing and normalizing locations in a SARIF 2.1.0 file requires extracting findings and applying path normalization utilities. This standardizes location data across multiple scanners for consistent reporting.

Can I merge or diff SARIF reports from different security scanners?▼

Yes, you can merge or diff SARIF reports from different security scanners. The parsing utilities extract findings and locations, allowing you to compare and aggregate results across multiple tools.

Why do my SARIF files contain duplicate security findings across different runs?▼

SARIF files contain duplicate security findings because multiple static analysis tools often report the same issues. Deduplicating these alerts using fingerprints and stable identifiers resolves the noise and produces actionable results.

Related Skills

Explore More Software Engineering Skills→
manuelbrandner85manuelbrandner85

sarif-parsing

Parse SARIF 2.1.0 results and aggregate security findings by severity.

Community
Advanced
RDEWAIRDEWAI
5

validate-pipeline

Validate YAML CI/CD pipeline files for syntax, stages, and security.

Official
Intermediate
SuperlendSuperlend

sarif-parsing

Parse SARIF 2.1.0 files and extract structured findings for reporting.

Official
Intermediate
onlypfachionlypfachi

design-review

Audit live sites for visual inconsistencies, spacing issues, and typography glitches.

Community
Advanced