sarif-parsing
>- Parses and processes SARIF files from static analysis tools like CodeQL, Semgrep, or other scanners.
About
>-
Parses and processes SARIF files from static analysis tools like CodeQL, Semgrep, or other
scanners. Triggers on "parse sarif", "read scan results", "aggregate findings", "deduplicate
alerts", or "process sarif output". Handles filtering, deduplication, format conversion, and
CI/CD integration of SARIF data. Does NOT run scans — use the Semgrep or CodeQL skills for that.
allowed-tools: Bash Read Glob Grep
What it can do
- >-
- Parses and processes SARIF files from static analysis tools like CodeQL, Semgrep, or other
- scanners. Triggers on "parse sarif", "read scan results", "aggregate findings", "deduplicate
- alerts", or "process sarif output". Handles filtering, deduplication, format conversion, and
- CI/CD integration of SARIF data. Does NOT run scans — use the Semgrep or CodeQL skills for that.
- allowed-tools: Bash Read Glob Grep
Setup
- Install:
npx skills add trailofbits/skills --all - The skill auto-loads when relevant, or invoke it by name in your agent.
Prerequisites
A compatible AI coding agent (Claude Code, Cursor, etc.).
Use cases
Works with
Trust score — 9/10
Trail of Bits is a top-tier security research firm; their skills are professional-grade auditing and fuzzing playbooks used by their own engineers. Open source.
Sources
Every fact above was checked against these sources. Where a claim comes from the provider and couldn't be independently verified, the text says so.