User-friendly documentation for the SARIF file format.
-
Updated
Dec 15, 2023
#
sarif
Here are 837 public repositories matching this topic...
⚙️ Scan your Go, Java, Kotlin, PHP, Python, JavaScript, TypeScript, .NET projects at GitHub with Qodana. This repository contains Qodana for Azure, GitHub, CircleCI and Gradle
javascript kotlin python java go php typescript static-code-analysis dotnet static-analysis actions code-review code-quality sarif devsecops code-scanning azure-pipelines github-actions azure-extensions qodana
-
Updated
Aug 5, 2026 - JavaScript
AI Bill of Materials — discover every AI agent, model, and API in your infrastructure
-
Updated
May 24, 2026 - Python
A fast universal code security scanner, written in Rust. Batteries included: supports 14 languages, TUI for triage, secrets, post-quantum audits, diff-aware scans and more 𓃥
rust cli security tree-sitter linter static-analysis pre-commit sarif vulnerability-scanner sast code-security semgrep opengrep
-
Updated
Jul 27, 2026 - Rust
MCP-native security automation workbench (SDK + CLI + MCP) — authorized testing + static AI/MCP attack-surface self-audit to SARIF / GitHub Code Scanning
python cli automation sdk mcp active-directory knowledge-graph penetration-testing mcts kerberos nuclei vulnerability-scanners red-team sarif security-tools c2 docker-sandbox lateral-movement ai-powered llm
-
Updated
Jul 26, 2026 - Python
Corax for Java: A general static analysis framework for java code checking.
java security security-audit static-code-analysis static-analysis code-analysis owasp vulnerability software-analysis program-analysis taint-analysis soot abstract-interpretation cwe sarif sast flowdroid
-
Updated
Dec 3, 2024 - Kotlin
Lint, format and auto-fix your Groovy / Jenkinsfile / Gradle files using command line
lint groovy gradle nextflow ci groovy-language linter codenarc jenkinsfile hacktoberfest sarif code-quality-analyzer sarif-report megalinter
-
Updated
Aug 2, 2026 - JavaScript
🔧 JetBrains Qodana’s official command line tool
javascript kotlin python java cli php typescript static-code-analysis ci code-review code-quality sarif devsecops code-scanning qodana sarif-report
-
Updated
Aug 1, 2026 - Go
Semantic SBOM/CBOM/AI-BOM diff, quality scoring, and compliance validation for CycloneDX/SPDX — component, license, and vulnerability change analysis, cryptographic inventory grading, PQC readiness (CNSA 2.0, NIST IR 8547), and regulatory gates for NTIA, FDA, EU CRA, BSI TR-03183, EUCC, SSDF, EO 14028, and the EU AI Act.
vex spdx appsec post-quantum-cryptography vulnerability-management sarif oss-compliance licence-management security-compliance sbom pqc cyclonedx software-supply-chain-security sbom-tool sbom-quality aibom cbom cryptographic-inventory eu-ai-act cyber-resilience-act
-
Updated
Aug 1, 2026 - Rust
CI-native security testing for MCP servers. Attack simulation, schema drift detection, and health scoring before agents depend on them.
cli security mcp developer-tools regression-testing sarif code-scanning ai-security github-action supply-chain-security ai-agent model-context-protocol mcp-server agent-security mcp-security schema-drift ai-supply-chain mcp-testing github-code-scanning mcp-ci
-
Updated
Aug 5, 2026 - HTML
AI-native code security auditor on AgentField that proves exploitability with verdicts, traces, and actionable evidence.
python open-source security developer-tools application-security cwe autonomous-agents sarif devsecops ai-agents vulnerability-scanner graphql-security sast ai-security llm agentic-ai agentfield
-
Updated
Jul 8, 2026 - Python
Lockfile-first scanner for compromised npm/PyPI/Maven/Cargo/Go/RubyGems packages — OSV + curated extras feed, SLSA L3, locked-container CI
python go cli npm security rubygems maven pypi supply-chain cargo osv sca sarif lockfile devsecops vulnerability-scanner slsa supply-chain-security dependency-scanner sigstore
-
Updated
May 5, 2026 - Python
Modern offline-first Application Security Intelligence Platform for Android, iOS, Flutter and React Native with attack-chain analysis, explainable findings, source exploration, AI-assisted investigation and professional reporting.
python react-native static-analysis reverse-engineering apk owasp cybersecurity beetle application-security pentesting flutter mobsf android-security mobile-security ios-security sarif devsecops sbom fastapi masvs
-
Updated
Jul 21, 2026 - Python
Fully open-source SAST scanner supporting a range of languages and frameworks. Integrates with major CI pipelines and IDE such as Azure DevOps, Google CloudBuild, VS Code and Visual Studio. No server required!
-
Updated
Sep 4, 2020 - Python
Detect npm packages compromised in the Shai-Hulud 2.0 supply chain attack (Nov 2025). Scans for 790+ malicious packages, suspicious scripts, TruffleHog activity, SHA1HULUD runners, and secrets exfiltration. GitHub Action with SARIF support.
nodejs npm security sarif devsecops vulnerability-scanner malware-detection credential-theft github-actions open-source-security supply-chain-security sarif-report package-security shai-hulud shai-hulud-detector shai-hulud-attack shai-hulud2-detector shai-hulud2 shai-hulud2-inspector sha1-hulud
-
Updated
Aug 5, 2026 - TypeScript
♿ Suite of open and standards-based tools for performing reliable accessibility conformance testing at scale
testing typescript accessibility a11y aria monorepo wcag json-ld earl data-processing customer-facing act sarif horizon2020
-
Updated
Aug 4, 2026 - HTML
A React-based component for viewing SARIF files.
-
Updated
Nov 12, 2024 - TypeScript
The deterministic merge gate for AI-generated agent capability changes — a local-first, static Tool-Use Readiness review for MCP, OpenAPI, and SDK tool surfaces. Open-source CLI + GitHub Action.
mcp static-analysis openapi ci-cd sarif ai-agents policy-as-code github-actions langchain crewai model-context-protocol openai-agents-sdk mcp-security google-adk ai-agent-security agent-governance release-readiness release-gate agent-release-readiness tool-use-readiness
-
Updated
Aug 5, 2026 - Python
ImpactGuard — Lightweight multi-language API impact analyzer
git diff ast call-graph patch risk-assessment impact-analysis sarif multi-language-support sast signature-extraction pre-commit-hooks commit-analysis cicd-integration automatic-patching runtime-tracing tree-siter
-
Updated
Jul 12, 2026 - Python
Improve this page
Add a description, image, and links to the sarif topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the sarif topic, visit your repo's landing page and select "manage topics."