skills.rest
microsoft
microsoftOFFICIAL
Explore all skills by this author →
Website𝕏@OpenAtMicrosoftGitHub

validate-sarif

Validate SARIF files against the SARIF 2.1.0 schema and AI profile rules.

224|105|Updated Nov 5, 2015
Search Tags:#security#validation#schema#sarif#multitool#ai-profile
One-click install
npx skills add https://github.com/microsoft/sarif-sdk --skill validate-sarif
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: validate-sarif
Source: https://github.com/microsoft/sarif-sdk/tree/main/skills/validate-sarif
Command: npx skills add https://github.com/microsoft/sarif-sdk --skill validate-sarif

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Validates SARIF files against the SARIF 2.1.0 schema and the AI-generated findings profile rules shipped with Sarif.Multitool.

Core Features & Use Cases

  • Ensures structural correctness by validating against the SARIF schema.
  • Enforces AI-profile conformance per docs, including required keys and vocabulary.
  • Supports single-file and directory-wide validation to integrate into CI pipelines.

Quick Start

Run the skill against a SARIF file or directory to validate and generate a report.

Frequently Asked Questions about validate-sarif

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I validate SARIF files against the 2.1.0 schema?▼

Validate SARIF files against the 2.1.0 schema by running this tool on a single file or recursively across directories to ensure structural correctness and AI-profile conformance.

What is the AI-generated findings profile in SARIF validation?▼

The AI-generated findings profile defines required keys and vocabulary rules shipped with Sarif.Multitool to ensure AI-generated SARIF outputs conform to specific structural and semantic standards.

Can I validate multiple SARIF files across a directory in a CI pipeline?▼

Yes, directory-wide validation is supported, allowing you to recursively validate all SARIF files within a directory to integrate structural and AI-profile checks into CI pipelines.

Do I need Sarif.Multitool to enable AI profile validation rules?▼

Yes, Sarif.Multitool version 5.0.0 or higher is required, and you must invoke the tool with --rule-kind 'Sarif;AI' to enable full validation of both the schema and the AI profile.

Why does my SARIF validation fail on AI-profile conformance checks?▼

SARIF validation fails on AI-profile conformance when required keys or specific vocabulary rules defined in the AI-generated findings profile are missing or incorrect in the output file.

Does Sarif.Multitool work for recursive SARIF schema validation?▼

Sarif.Multitool works for recursive SARIF schema validation by processing entire directories to ensure every file meets 2.1.0 structural correctness and AI-profile rule requirements.

Related Skills

Explore More Software Engineering Skills→
microsoftmicrosoft
224

emit-sarif

Serialize AI-generated security findings as SARIF v2.1.0 logs.

Official
Advanced
mejangomejango

sarif-parsing

Parse SARIF 2.1.0 files to extract and deduplicate findings.

Community
Intermediate
softmgsoftmg

github-workflow-automation

Automate GitHub Actions workflow generation and CI/CD pipeline management.

Official
Advanced
jakubciszakjakubciszak
1

semgrep

Apply Semgrep rules to identify security issues across multi-language codebases.

Community
Advanced