sarif-report

🦙 MegaLinter analyzes 50 languages, 22 formats, 21 tooling formats, excessive copy-pastes, spelling mistakes and security issues in your repository sources with a GitHub Action, other CI tools or locally.

Lint, format and auto-fix your Groovy / Jenkinsfile / Gradle files using command line

🔧 JetBrains Qodana’s official command line tool

Telling tales on you for leaking secrets!

Go library for SARIF - Static Analysis Results Interchange Format

GitHub Action to check for vulnerabilities in your container image

This action uses govulncheck to perform a scan of the code, afterwards it will parse the output and transform it into an Sarif Report, which will be uploaded to Github using the code-scanning API.

Machine output for Mix tasks

Static AI Agent Risk Analyzer for AI applications. Detects capabilities, prompt risks, tool permissions, MCP integrations, governance gaps, and autonomy before deployment. Generate JSON, HTML and SARIF reports for CI/CD.

Run this GitHub action to validate your Kubernetes resources with the Monokle SARIF validator.

Validate your IAM Policies and SCPs with AWS Policy Validator, and convert those results into SARIF documents for reporting.

A GO package to create and manipulate SARIF logs

Converts Azure Container Scan Action output to SARIF, for an easier integration with tools like GitHub Code Scanning

AI-powered triage for SAST findings.

A simple, zero-dependency Node.js CLI that converts SARIF reports into interactive, shareable HTML reports with file explorer and collapsible issue details.

Action that converts Azure Container Scan Action output to SARIF

A GitHub Action that automates the scanning of Java code, identifying the CWEs present in the vulnerable methods.

Effortlessly manage GitHub issues with our CLI tool. Create, organize, and optimize issues in bulk while handling dependencies. 🐙✨

Imagecov GitHub Action

A Go library for transforming raw DAST tool findings into standardized report output. Import it into OWASP ZAP wrappers, Nuclei post-processors, or custom scanners.