sarif-parsing

Parse SARIF 2.1.0 files to extract, deduplicate, and summarize findings.

2|Updated Jan 21, 2026
One-click install
npx skills add https://github.com/roderik/mpe --skill sarif-parsing
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: sarif-parsing
Source: https://github.com/roderik/mpe/tree/main/.agents/skills/sarif-parsing
Command: npx skills add https://github.com/roderik/mpe --skill sarif-parsing

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

SARIF parsing helps teams read, deduplicate, and report findings from static analysis results to streamline security workflows and CI/CD.

Core Features & Use Cases

  • Parse SARIF files (version 2.1.0) to extract findings across multiple analysis runs.
  • Deduplicate alerts across runs using fingerprints or partialFingerprints for stable tracking.
  • Generate actionable summaries and export data for CI/CD pipelines.

Quick Start

Use the sarif-parsing skill to load a SARIF file named 'results.sarif' and produce a concise summary.

Frequently Asked Questions about sarif-parsing

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I parse SARIF files to extract static analysis findings?▼

Deduplicating static analysis alerts in SARIF uses fingerprints or partialFingerprints to track findings stably. This parsing skill applies fingerprinting across multiple runs to consolidate cross-run security alerts.

Can I use standard Python to process SARIF reports without extra dependencies?▼

Summarizing multi-tool SARIF reports consolidates findings from various static analysis runs. This skill parses multiple SARIF 2.1.0 inputs, applies deduplication, and generates actionable summaries for CI/CD pipelines.

What is the best way to deduplicate static analysis alerts across multiple SARIF runs?▼

Deduplicating static analysis alerts in SARIF uses fingerprints or partialFingerprints to track findings stably. This parsing skill applies fingerprinting across multiple runs to consolidate cross-run security alerts.

Can I use standard Python to process SARIF reports without extra dependencies?▼

Processing SARIF reports with standard Python is fully supported. This skill handles loading, parsing, and summarizing static analysis findings using only built-in Python libraries, requiring no external dependencies.

How do I summarize multi-tool SARIF reports for CI/CD pipelines?▼

Summarizing multi-tool SARIF reports consolidates findings from various static analysis runs. This skill parses multiple SARIF 2.1.0 inputs, applies deduplication, and generates actionable summaries for CI/CD pipelines.