sarif-parsing

Consolidate SARIF files by parsing and normalizing findings from diverse analyzers to provide a unified view. This consolidation enables cross-run correlation, deduplication using fingerprints, and summarized reporting by file, rule, and severity.

Yes, deduplicate static analysis findings across multiple CI/CD runs by applying fingerprinting logic to normalized SARIF data. This cross-run correlation tracks recurring issues over time, ensuring consistent deduplication and actionable remediation.

Parse large SARIF datasets in CI pipelines using defensive parsing and optional streaming techniques. This approach handles optional fields, applies path normalization, and aggregates results by rule and severity without failing on malformed data.

Yes, SARIF parsing handles missing optional fields and path normalization through defensive parsing logic. It safely extracts findings, normalizes file paths, and generates fingerprints for aggregation even when optional SARIF schema fields are absent.

Aggregate security findings by rule and severity by parsing SARIF outputs to extract and normalize findings. This process summarizes deduplicated results, providing an integrated view of static analysis data suitable for dashboards and CI/CD reporting.

You need to normalize SARIF results for cross-tool analysis because diverse static analyzers output varying structures. Normalizing these structures ensures consistent deduplication, accurate fingerprinting, and reliable aggregation by file, rule, and severity.