skills.rest
trailofbits
trailofbitsOFFICIAL
Explore all skills by this author →
Website𝕏@trailofbitsGitHub

sarif-parsing

Parse SARIF files to extract and deduplicate findings across runs.

6.5k|561|Updated Jan 14, 2026
Search Tags:#security#analysis#reporting#deduplication#parsing#ci-cd#sarif
One-click install
npx skills add https://github.com/trailofbits/skills --skill sarif-parsing-trailofbits
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: sarif-parsing
Source: https://github.com/trailofbits/skills/tree/main/plugins/static-analysis/skills/sarif-parsing
Command: npx skills add https://github.com/trailofbits/skills --skill sarif-parsing-trailofbits

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Centralize and normalize SARIF findings from multiple security scanners, enabling deduplication and streamlined reporting.

Core Features & Use Cases

  • Parse SARIF files produced by static analysis tools to extract findings across runs.
  • Deduplicate alerts using stable fingerprints and aggregate results for CI/CD dashboards.
  • Generate concise reports and enable cross-tool vulnerability trend analysis.

Quick Start

Parse a SARIF file to extract, deduplicate, and summarize findings.

Frequently Asked Questions about sarif-parsing

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I parse SARIF files to extract findings across multiple security tools?▼

To parse SARIF files, the skill extracts findings across runs and tools, deduplicates alerts using stable fingerprints, and produces a unified summary. It handles optional fields and path variations across environments.

What is the best way to deduplicate static analysis alerts in a CI/CD pipeline?▼

The best way to deduplicate static analysis alerts is to parse SARIF outputs and generate stable fingerprints. This normalizes results across multiple security scanners to provide aggregated data for CI/CD dashboards.

Can I centralize SARIF reports from different security scanners for cross-tool vulnerability analysis?▼

Yes, you can centralize SARIF reports from different security scanners. The skill normalizes findings from multiple tools, enabling cross-tool vulnerability trend analysis and concise reporting.

Does SARIF parsing work with files that have missing optional fields or path variations?▼

SARIF parsing works with files containing missing optional fields or path variations. The skill ensures resilience to these environmental differences while extracting and deduplicating findings.

How do I generate a unified summary of security findings from multiple analysis runs?▼

To generate a unified summary, the skill parses SARIF files to extract findings across multiple runs and tools. It deduplicates results using stable fingerprints to provide a centralized security analytics report.

Related Skills

Explore More Data & Analytics Skills→
sbknanasbknana
10

sarif-parsing

Parse SARIF files to deduplicate findings and generate structured reports.

Community
Advanced
vigoliumvigolium
965

sarif-parsing

Convert SARIF static analysis outputs into deduplicated findings for CI/CD gating.

Official
Intermediate
SuperlendSuperlend

sarif-parsing

Parse SARIF 2.1.0 files and extract structured findings for reporting.

Official
Intermediate
zekiriabdzekiriabd
140

sarif-parsing

Parse SARIF 2.1.0 files to extract, normalize, filter, and compare static analysis findings.

Community
Advanced