skills.rest
Superlend
SuperlendOFFICIAL
Explore all skills by this author →
Website𝕏@SuperlendHQGitHub

sarif-parsing

Parse SARIF 2.1.0 files and extract structured findings for reporting.

Updated Jul 10, 2025
Search Tags:#reporting#deduplication#parsing#ci-cd#security-analysis#sarif#tool-aggregation
One-click install
npx skills add https://github.com/Superlend/superloop-core-contracts --skill sarif-parsing-superlend
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: sarif-parsing
Source: https://github.com/Superlend/superloop-core-contracts/tree/main/.cursor/skills/static-analysis/skills/sarif-parsing
Command: npx skills add https://github.com/Superlend/superloop-core-contracts --skill sarif-parsing-superlend

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

SARIF results from multiple security and code-quality tools are often scattered, inconsistent, and hard to correlate. This Skill standardizes SARIF data processing to help you parse, deduplicate, and extract actionable findings for reliable reporting and CI/CD workflows.

Core Features & Use Cases

  • Aggregate SARIF runs: Merge results from different scanners into a single, coherent view.
  • Deduplicate findings: Use stable fingerprints to identify duplicates across runs and tools.
  • Extract & report: Pull rule IDs, severities, file paths, and line numbers for dashboards or reports.
  • CI/CD integration: Normalize SARIF data and generate summaries to feed into pipelines and quality gates.
  • Use Case: Combine CodeQL and Semgrep SARIF outputs, deduplicate alerts, and surface only unique high-severity issues.

Quick Start

Run the SARIF parser on a local SARIF file:

  • python resources/sarif_helpers.py results.sarif

Frequently Asked Questions about sarif-parsing

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I merge and deduplicate SARIF results from multiple security scanners?▼

To merge and deduplicate SARIF results, you can parse multiple scanner outputs and apply stable fingerprinting to identify duplicate alerts across different runs. This process standardizes SARIF data into a single, coherent view for reliable reporting and cross-tool aggregation.

What is the best way to combine CodeQL and Semgrep SARIF outputs for reporting?▼

The best way to combine CodeQL and Semgrep SARIF outputs is to aggregate the runs and deduplicate alerts using stable fingerprints. This surfaces only unique high-severity issues, extracting rule IDs, severities, and file paths for dashboards or reports.

Does this SARIF parser support SARIF 2.1.0 files and optional components?▼

Yes, this SARIF parser supports SARIF 2.1.0 files and handles optional components. It provides robust field access to ensure reliable extraction of structured findings from your security scanning results.

How do I extract rule IDs, severities, and line numbers from a SARIF file?▼

To extract rule IDs, severities, and line numbers from a SARIF file, parse the file to pull structured findings. This normalizes the security data and prepares it for use in dashboards or CI/CD quality gates.

Can I normalize SARIF data to feed summaries into CI/CD pipelines?▼

Yes, you can normalize SARIF data to generate summaries and feed them into CI/CD pipelines. This allows you to integrate cross-tool aggregation results directly into your automated quality gates and workflows.

Related Skills

Explore More Software Engineering Skills→
zekiriabdzekiriabd
140

sarif-parsing

Parse SARIF 2.1.0 files to extract, normalize, filter, and compare static analysis findings.

Community
Advanced
balic-AI-ML-R-D-Resourcesbalic-AI-ML-R-D-Resources

sarif-parsing

Parse SARIF 2.1.0 logs to extract and deduplicate security findings.

Official
Advanced
FlorianBruniauxFlorianBruniaux
77

sarif-parsing

Parse SARIF files to normalize, deduplicate, and summarize static analysis findings.

Community
Advanced
sbknanasbknana
10

sarif-parsing

Parse SARIF files to deduplicate findings and generate structured reports.

Community
Advanced