sarif-parsing

Parse SARIF files to normalize, deduplicate, and summarize static analysis findings.

77|3|Updated Mar 24, 2026
One-click install
npx skills add https://github.com/FlorianBruniaux/starmapper --skill sarif-parsing-florianbruniaux
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: sarif-parsing
Source: https://github.com/FlorianBruniaux/starmapper/tree/main/.claude/plugins/static-analysis/skills/sarif-parsing
Command: npx skills add https://github.com/FlorianBruniaux/starmapper --skill sarif-parsing-florianbruniaux

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

SARIF parsing and processing to normalize, deduplicate, and summarize findings from static analysis tools.

Core Features & Use Cases

  • Parse SARIF files from multiple tools
  • Deduplicate findings using stable fingerprints
  • Aggregate and summarize results across runs and tools
  • Integrate into CI/CD workflows and convert to other formats

Quick Start

Provide a SARIF file path to parse, deduplicate, and summarize findings.

Frequently Asked Questions about sarif-parsing

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I deduplicate SARIF findings from multiple static analysis tools?▼

Deduplicate SARIF findings by parsing files from multiple static analysis tools and using stable fingerprints to identify and remove duplicate results across runs. This normalizes and aggregates findings into a single output.

What is the best way to aggregate static analysis results across different CI/CD runs?▼

Aggregate static analysis results by parsing SARIF files produced across different CI/CD runs. This process normalizes findings, applies fingerprint-based deduplication, and summarizes the aggregated results for review.

Can I convert SARIF files to other formats for CI/CD pipeline integration?▼

You can convert SARIF files to other formats during CI/CD pipeline integration. The parser normalizes and processes static analysis findings, supporting conversion to integrate with downstream security and quality workflows.

Does SARIF parsing validate schema and handle optional fields safely?▼

SARIF parsing validates the schema and handles optional fields safely. It enforces safe-data handling while processing static analysis results to ensure normalized and deduplicated findings without losing optional data.

Why do I need a separate parser for SARIF files instead of using my scanner directly?▼

You need a separate parser for SARIF files because it remains distinct from scanners. It normalizes, deduplicates, and summarizes findings from multiple tools, whereas scanners only produce raw results.