OASIS SARIF TC: Repository for development of the draft standard, where requests for modification should be made via Github Issues
☆210Jul 19, 2026Updated this week
Alternatives and similar repositories for sarif-spec
Users that are interested in sarif-spec are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- SARIF Microsoft Visual Studio Code extension☆137Feb 14, 2026Updated 5 months ago
- User-friendly documentation for the SARIF file format.☆358Dec 15, 2023Updated 2 years ago
- JavaScript code and supporting files for working with the 'Static Analysis Results Interchange Format' (SARIF, see https://github.com/oas…☆33May 27, 2024Updated 2 years ago
- A React-based component for viewing SARIF files.☆108Nov 12, 2024Updated last year
- Go library for SARIF - Static Analysis Results Interchange Format☆84Apr 24, 2026Updated 2 months ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- A set of Python command line tools for working with SARIF files produced by code analysis tools☆155Apr 21, 2026Updated 2 months ago
- A project template containing sensible defaults for starting a new FOSS-project☆17May 30, 2022Updated 4 years ago
- Quality domain agnostic regular expression pattern matcher that persists results to SARIF☆40Jul 30, 2025Updated 11 months ago
- Action to detect if a secret is initially detected in a pull request☆22Jul 13, 2026Updated last week
- Easily install and use JRE from a Node application.☆13Updated this week
- ☆11Jan 13, 2023Updated 3 years ago
- Run CodeQL queries at scale using Multi-Repository Variant Analysis (MRVA)☆67Jul 3, 2026Updated 2 weeks ago
- GitHub Secret Scanning Auto Remediator (GSSAR)☆52Jun 24, 2026Updated 3 weeks ago
- Command line utility to obtain OAuth access tokens for Google services☆12Dec 19, 2022Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Actions for running CodeQL analysis☆1,585Updated this week
- Plume is a code representation benchmarking library with options to extract the AST from Java bytecode and store the result in various gr…☆79Oct 14, 2024Updated last year
- A more realistic demo of a buffer overflow cause by -ffast-math☆15Sep 10, 2022Updated 3 years ago
- A report formatter for Bandit (a Python security analyzer) that produces output in the SARIF format.☆20Sep 19, 2023Updated 2 years ago
- Service to scan licenses from source code☆12Aug 14, 2023Updated 2 years ago
- Binaries for the CodeQL CLI☆989Updated this week
- CodeQL and Binary Ninja scripts to accompany the blog post☆11Feb 3, 2023Updated 3 years ago
- The International FOSS Law Book, v.2 and onwards☆15Jan 17, 2022Updated 4 years ago
- The Disclosure-CLI provides an easy way to access the public api of the FOSS Disclosure Portal. It is the recommended tool for external s…☆19Apr 14, 2026Updated 3 months ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Integrating Typescript with Graphql using Type-graphql - A modern framework for APIs in Node with Graphql☆18Jan 11, 2023Updated 3 years ago
- ☆18Sep 6, 2020Updated 5 years ago
- Simplify and speed up common tasks in your ORT-based FOSS review workflows☆13Apr 16, 2026Updated 3 months ago
- Optimize the utilization of GHAS licenses in an enterprise (or organization)☆15Feb 12, 2026Updated 5 months ago
- Skills for Zeal of the Convert, [unprompted] 2026☆17Mar 2, 2026Updated 4 months ago
- Github Action for integrating Security Alerts with JIRA☆52Jul 8, 2026Updated last week
- A PoC exploit for CVE-2022-41622 - a CSRF in F5 BIG-IP control plane that leads to remote root☆22Oct 20, 2022Updated 3 years ago
- fatbom (Fat Bill Of Materials) is a tool which combines the SBOM generated by various tools into one fat SBOM. Thus leveraging each tool'…☆32Oct 24, 2022Updated 3 years ago
- A simple non-caching GraphQL client for query, mutation and subscription☆22Dec 10, 2022Updated 3 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Play with KinD and OIDC volumes☆15Oct 24, 2021Updated 4 years ago
- THIS REPOSITORY AND PACKAGE WILL BE DEPRECATED IN JULY 2024. CloudEvent Types for Node.js☆25Jun 18, 2024Updated 2 years ago
- Static Analysis Results Interchange Format (SARIF) For OCaml☆14Apr 22, 2026Updated 2 months ago
- A simple Gradle plugin, built on the [Gradle Versions Plugin] with sane no-configuration-defaults and customization options.☆20Nov 11, 2022Updated 3 years ago
- The official Bugzilla website☆12Jul 11, 2026Updated last week
- The uncompromising Jupyter notebook formatter.☆14Jan 26, 2024Updated 2 years ago
- POJOs generated from the Static Analysis Results Interchange Format (SARIF) JSON schema.☆28Updated this week