sarif-tools
« Back to VersTracker
Description:
Set of command-line tools and Python library for working with SARIF files
Type: Formula  |  Latest Version: 3.0.5@0  |  Tracked Since: Oct 27, 2025
Links: Homepage  |  formulae.brew.sh
Category: Developer tools
Tags: sarif static-analysis devops security reporting
Install: brew install sarif-tools
About:
sarif-tools is a Python library and CLI suite for parsing, validating, and transforming Static Analysis Results Interchange Format (SARIF) reports. It enables developers to convert SARIF data into formats like JUnit XML, HTML, or Markdown for CI/CD integration. The tool helps unify security and code quality outputs across different analysis engines.
Key Features:
  • CLI and Python API for SARIF processing
  • Format conversion (SARIF to JUnit, HTML, Markdown)
  • Validation of SARIF files against the schema
  • Cross-tool result aggregation and filtering
Use Cases:
  • Integrating SARIF results into CI pipelines with JUnit reporting
  • Generating human-readable reports from security scans
  • Normalizing outputs from multiple static analysis tools
Alternatives:
  • sarif-multitool – Microsoft's .NET-based SARIF utility; heavier but feature-rich
  • codeclimate – SaaS platform with built-in SARIF support; requires subscription
Version History
Detected Version Rev Change Commit
Oct 27, 2025 9:43pm 0 VERSION_BUMP f3a3962d
Oct 3, 2025 9:39am 0 VERSION_BUMP 09219e07