sarif-parsingby Trail of BitsDevelopmentGitHub stars: 7.3k
SARIF Parsing skill: what it does and how to install it
Parses, aggregates and deduplicates SARIF files from static analysis tools such as CodeQL and Semgrep.
Install
$ npx skills add trailofbits/skills --skill sarif-parsingRun it in a terminal. If your agent is already running, start a new session so it picks the skill up.
About this skill
Parses, aggregates and deduplicates SARIF files from static analysis tools such as CodeQL and Semgrep.
Similar skills
- CodeQLScans a codebase for security vulnerabilities with CodeQL's data flow and taint tracking analysis.
- Git Guardrails for Claude CodeSets up Claude Code hooks that block dangerous git commands such as push, reset --hard and clean before they run.
- Migrate to ShoehornMigrates test files from `as` type assertions to @total-typescript/shoehorn.