A set of Python command line tools for working with SARIF files produced by code analysis tools
☆159Oct 27, 2026Updated this week
Alternatives and similar repositories for sarif-tools
Users that are interested in sarif-tools are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- JavaScript code and supporting files for working with the 'Static Analysis Results Interchange Format' (SARIF, see https://github.com/oas…☆34Oct 22, 2026Updated last week
- Python classes for the SARIF object model☆50Apr 3, 2024Updated 2 years ago
- Original workshops and staging area for new ones☆16Jul 3, 2025Updated last year
- .NET code and supporting files for working with the 'Static Analysis Results Interchange Format' (SARIF, see https://github.com/oasis-tcs…☆228Updated this week
- This library provides standardized APIs for enabling feature flags within python applications. Utilize this library to secure a consisten…☆26Sep 2, 2026Updated last month
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- User-friendly documentation for the SARIF file format.☆371Dec 15, 2023Updated 2 years ago
- A GitHub CLI extension for interacting with Code Scanning analyses and SARIF files☆14Dec 8, 2025Updated 10 months ago
- OASIS SARIF TC: Repository for development of the draft standard, where requests for modification should be made via Github Issues☆213Oct 15, 2026Updated 2 weeks ago
- Store the ATD/openapi/protobuf/... interfaces between semgrep components☆20Updated this week
- GitHub Action for filtering Code Scanning alerts by path and id☆35Jul 22, 2026Updated 3 months ago
- A group of Rust projects for interacting with the SARIF format☆136Updated this week
- Put the power of CodeQL in your pocket, take it with you to any CI 🚀☆12Oct 27, 2023Updated 3 years ago
- SARIF Microsoft Visual Studio Code extension☆140Updated this week
- Drone plugin for publishing Docker images via buildah tool☆11Oct 7, 2026Updated 3 weeks ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- The GitHub Action for Microsoft Application Inspector☆18Jul 10, 2025Updated last year
- A tool for syncing the CodeQL Action from GitHub.com to GitHub Enterprise Server, including copying the CodeQL bundle.☆51Oct 9, 2026Updated 3 weeks ago
- This repository contains CodeQL queries and libraries which support various Coding Standards.☆231Updated this week
- Takes a software bill of materials and outputs provenance, and activity data from trustypkg.dev☆10May 19, 2025Updated last year
- LLM <-- MCP --> CodeQL( AST | CFG | CLI | LSP )☆38Oct 22, 2026Updated last week
- An axe-core reporter that outputs axe scan results in SARIF format (http://sarifweb.azurewebsites.net/)☆38Aug 13, 2026Updated 2 months ago
- An example of a GitHub Actions workflow showing how code scanning with CodeQL can be parallelized on monorepos.☆16Dec 14, 2022Updated 3 years ago
- BcryptMontoya is a powerful plugin for Burp Suite that allows you to effortlessly modify HTTP requests and responses passing through the …☆23Apr 27, 2026Updated 6 months ago
- my-semgrep-rules☆10Jun 15, 2022Updated 4 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Custom semgrep rules registry☆14Aug 23, 2022Updated 4 years ago
- Action to detect if a secret is initially detected in a pull request☆24Updated this week
- Collection of community-driven CodeQL query, library and extension packs☆227Updated this week
- CodeQL Extractor, Library, and Queries for Infrastructure as Code☆62Oct 16, 2026Updated 2 weeks ago
- A React-based component for viewing SARIF files.☆108Oct 16, 2026Updated 2 weeks ago
- This is the GitHub repo of the OpenChain SBOM Study Group☆15Updated this week
- Burp extension to generate multi-step CSRF POC.☆31Sep 23, 2019Updated 7 years ago
- This repository contain tool to publish code coverage reports to Azure pipelines☆22Updated this week
- An extension for VS Code that improves editor support for relative file paths in typescript/javascript sources, including auto-completion…☆18Updated this week
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Depstubber generates type-correct stubs for Go dependencies, for use in testing☆19Sep 10, 2026Updated last month
- ☆18Dec 20, 2025Updated 10 months ago
- Audit your GitHub Actions workflow runs to see exactly which Actions were downloaded☆91Oct 20, 2026Updated last week
- ☆14Mar 4, 2024Updated 2 years ago
- A library used for generating C# classes from DTDL interfaces.☆15Jul 9, 2024Updated 2 years ago
- A collection of my Semgrep rules to facilitate vulnerability research.☆880Oct 18, 2026Updated last week
- Run CodeQL queries at scale using Multi-Repository Variant Analysis (MRVA)☆70Jul 3, 2026Updated 3 months ago