Skills and MCP tagged “sarif”

codeql official github skill Walks you through CodeQL code scanning: Actions workflows, CLI commands, SARIF output, and fixing failed analyses. GitHub Copilot 2,000installs semgrep trailofbits skill Runs a Semgrep static security audit on your codebase. It presents a plan for user confirmation and merges all findings into SARIF. Claude Code CX Codex Cursor +1 9,500installs sarif-parsing trailofbits skill Processes existing SARIF reports from CodeQL, Semgrep, and other scanners. Use it to filter findings, remove duplicates, or prepare results for CI/CD. Claude Code CX Codex Cursor +1 5,900installs audit-augmentation trailofbits skill Projects SARIF static analysis reports, weAudit notes, and binary graphs onto Trailmark code graphs. Useful when mapping vulnerabilities to call graphs and data taint paths. Claude Code CX Codex Cursor +1 3,900installs triage-finding official OpenAI skill Triages external security reports against repository code and SECURITY.md policies, assigning static-evidence verdicts without modifying files. CX Codex GP ChatGPT 30installs security-diff-scan official OpenAI skill Reviews pull requests, commits, and local diffs for security vulnerabilities. Catches risks in modified and deleted code before merging. CX Codex GP ChatGPT 30installs