skills.rest
igbuend
igbuendCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

sarif-tools

Process, analyze, and transform SARIF files using the Microsoft sarif-tools CLI.

8|1|Updated Jan 19, 2026
Search Tags:#code quality#static analysis#reporting#vulnerability management#security scanning#sarif
One-click install
npx skills add https://github.com/igbuend/grimbard --skill sarif-tools
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: sarif-tools
Source: https://github.com/igbuend/grimbard/tree/main/skills/sarif-tools
Command: npx skills add https://github.com/igbuend/grimbard --skill sarif-tools

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires sarif-tools, and includes references (resource) components.

What problem does it solve?

This Skill streamlines the management and analysis of SARIF (Static Analysis Results Interchange Format) files, making it easier to consolidate, report on, and act upon security scan findings.

Core Features & Use Cases

  • Consolidation: Merge SARIF outputs from multiple security tools into a single file.
  • Reporting: Generate human-readable reports (CSV, HTML, Word) and machine-readable formats (Code Climate JSON).
  • Analysis: Diff scan results between builds to identify regressions, add git blame information for context, and filter findings based on various criteria.
  • Use Case: After running multiple SAST tools on your codebase, use this Skill to combine all their SARIF outputs, generate an HTML report, and then diff the current results against the previous build's baseline to quickly spot new vulnerabilities.

Quick Start

Use the sarif-tools skill to generate a CSV report of all findings from the './sarif-output/' directory.

Frequently Asked Questions about sarif-tools

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I merge SARIF outputs from multiple security scanners into one file?▼

Merging SARIF outputs from multiple security scanners consolidates all findings into a single file. This skill uses the Microsoft sarif-tools CLI to combine results, allowing you to process and analyze unified security scan data efficiently.

Can I generate CSV or HTML reports from static analysis SARIF files?▼

Generating CSV or HTML reports from SARIF files transforms raw static analysis data into human-readable formats. This skill leverages sarif-tools to produce CSV, HTML, and Word reports, alongside machine-readable Code Climate JSON outputs for vulnerability management.

How do I diff SARIF scan results between builds to identify new vulnerabilities?▼

Diffing SARIF scan results between builds identifies regressions and new vulnerabilities by comparing current findings against a baseline. This skill uses sarif-tools to analyze differences, filter findings, and augment data with git blame information for context.

Do I need to install the Python sarif-tools package to process SARIF files?▼

Processing SARIF files requires the Python sarif-tools package to be installed. This skill depends on the sarif-tools CLI to execute its core operations, including consolidation, reporting, diffing, and filtering of static analysis security scan results.

What is the best way to filter security findings in a SARIF file?▼

Filtering security findings in a SARIF file isolates specific vulnerabilities based on selected criteria. This skill utilizes the sarif-tools CLI to filter static analysis results, enabling targeted vulnerability management and streamlined reporting of scan outputs.

Related Skills

Explore More Software Engineering Skills→
Ramprasad4121Ramprasad4121
1

sarif-parsing

Parse SARIF files from static analysis tools and aggregate security findings.

Community
Intermediate
I-OnlabsI-Onlabs
3

senior-secops

Run security scanner, vulnerability assessor, and compliance checker scripts with JSON reports.

Community
Advanced
igbuendigbuend
8

sarif-issue-reporter

Analyze SARIF 2.1.0 files to generate vulnerability reports with CVSS scoring.

Community
Advanced
SuperlendSuperlend

sarif-parsing

Parse SARIF 2.1.0 files and extract structured findings for reporting.

Official
Intermediate