Parse SARIF files from static analysis tools and deduplicate findings.
npx skills add https://github.com/ofelixdev/cc-kit --skill sarif-parsing-ofelixdev
Please help me install this Agent Skill. Skill: sarif-parsing Source: https://github.com/ofelixdev/cc-kit/tree/main/template/skills/sarif-parsing Command: npx skills add https://github.com/ofelixdev/cc-kit --skill sarif-parsing-ofelixdev
This Skill helps you parse, analyze, and manage the output from static analysis security tools, making it easier to understand and act on scan findings.
Use the sarif-parsing skill to extract all error-level findings from the attached file 'scan-results.sarif'.
High-intent search queries and answers about installing and using this skill.
To parse SARIF files, use this Skill to read and interpret scan outputs from tools like CodeQL or Semgrep. It processes the static analysis data by filtering findings, deduplicating alerts, and converting formats for easier CI/CD integration.
Yes, you can aggregate static analysis findings from multiple scans. This Skill combines results from different runs, removes duplicate alerts, and filters the data based on severity levels to prepare a unified report for your security dashboard.
Integrating static analysis scan results into CI/CD pipelines involves parsing SARIF files to gate deployments. This Skill processes scan outputs to filter error-level findings and formats the data for automated reporting and pipeline gating.
No, this Skill does not execute security scanning or vulnerability management tasks. It strictly processes and parses existing SARIF files generated by other tools, enabling data aggregation, deduplication, and format conversion of scan results.
The best way to filter false positives from a SARIF report is to parse the file and apply severity filtering. This Skill extracts specific error-level findings from static analysis outputs, allowing you to exclude known false positives before generating reports.
A limitation of SARIF parsing for CI/CD integration is that it only processes existing files and does not run scans. Ensure your static analysis tool generates valid SARIF format files before using this Skill to filter, deduplicate, or convert the results.
Avi977Parse and deduplicate SARIF files from static analysis tools for CI/CD reporting.
vigoliumConvert SARIF static analysis outputs into deduplicated findings for CI/CD gating.
SuperlendParse SARIF 2.1.0 files and extract structured findings for reporting.
elizaOSRun CodeQL and Semgrep scans and parse SARIF results.
