Software Development

SARIF Parsing

Parses and processes SARIF files from static analysis tools like CodeQL, Semgrep, or other scanners. Triggers on "parse sarif", "read scan results", "aggregate findings", "deduplicate alerts", or "process sarif output". Handles filtering, deduplication, format conversion, and CI/CD integration of SARIF data. Does NOT run scans — use the Semgrep or CodeQL skills for that.

Publisher / source

trailofbits/skills (found on skills.sh, an awesome list, the CSV list)

Upstream record

trailofbits/skills

Version

Version 3

Published

2026-11-02

Publication review

Approved for publication

Content fingerprint

cc5f008f40ffb8a1ae03ebd32d7234de43e828293955a0bc251b76ba249554fa