Parses and processes SARIF files from static analysis tools like CodeQL, Semgrep, or other scanners. Triggers on "parse sarif", "read scan results", "aggregate findings", "deduplicate alerts", or "process sarif output". Handles filtering, deduplication, format conversion, and CI/CD integration of SARIF data. Does NOT run scans — use the Semgrep or CodeQL skills for that.
安装
npx skills add trailofbits/skills --skill sarif-parsingnpx skills add trailofbits/skills --skill sarif-parsing -a claude-code -gnpx skills add trailofbits/skills --skill sarif-parsing -a codex -ggemini skills install https://github.com/trailofbits/skills.git --path plugins/static-analysis/skills/sarif-parsinggh skill install trailofbits/skills sarif-parsinggit clone --depth 1 https://github.com/trailofbits/skills /tmp/trailofbits__skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/trailofbits__skills/plugins/static-analysis/skills/sarif-parsing ~/.claude/skills/sarif-parsing # Claude Code
cp -R /tmp/trailofbits__skills/plugins/static-analysis/skills/sarif-parsing ~/.agents/skills/sarif-parsing # Codex, Cursor, Gemini CLI, Copilot, OpenCode