{"categories":[{"label":"Quality Assurance","url":"https://skillfed.io/packages/category/software-development-quality-assurance/2"}],"enrichment":{"capability":"Parses, analyzes, and transforms SARIF (Static Analysis Results Interchange Format) files through command-line tools and a Python library, supporting multiple output formats and comparisons.","skillfed_tags":["static-analysis","security-scanning","report-generation"],"use_cases":["Convert SARIF output from security scanners into HTML reports for stakeholder review","Generate CSV exports of all issues found across multiple static analysis tool runs","Compare SARIF results between two builds to identify newly introduced or resolved issues","Create Word document summaries of code quality findings for compliance or audit documentation","Track trends in issue counts over time using timestamped SARIF filenames"],"what_it_does":"SARIF Tools is a command-line utility and Python library for working with SARIF files\u2014the standard interchange format for static analysis tool output. It reads SARIF files produced by security scanners, linters, and code analysis tools, then transforms them into human-readable formats (HTML, CSV, Word documents, Code Climate JSON) or processes them programmatically. The package includes commands to summarize issues, compare results across builds, generate trend reports from timestamped scans, and enhance results with git blame information.\n\nThe library depends on jinja2 for templating, jsonpath-ng for navigating SARIF JSON structures, matplotlib for visualization, python-docx for Word document generation, and pyyaml for configuration. It's designed to handle real-world SARIF output from tools that may diverge from the standard\u2014applying minor normalization to severity levels, message formats, and location representations so that results are usable even when tool authors haven't perfectly aligned their output to the spec.","worth_installing":"Yes. The package is actively maintained, has low install friction, carries a permissive MIT license, and fills a clear need for teams working with SARIF output from multiple static analysis tools. No known vulnerabilities. Install it if you need to process, report on, or compare results from security or code-quality scanning tools."},"id":"sarif-tools","links":{"html":"https://skillfed.io/packages/sarif-tools","md":"https://skillfed.io/packages/sarif-tools.md","pypi":"https://pypi.org/project/sarif-tools/"},"maintenance":{"status":"active"},"meta":{"latest_release":"2025-07-17","license_spdx":null,"license_treatment":"permissive","name":"sarif-tools","python_support":"supports_current","summary":"SARIF tools"},"popularity":{"monthly_downloads":558037,"position":6008,"tier":"top_15000"},"security":{"n_vulnerabilities":0},"version":"3.0.5"}