User-friendly documentation for the SARIF file format.
-
Updated
Dec 15, 2023
#
sarif
Here are 738 public repositories matching this topic...
⚙️ Scan your Go, Java, Kotlin, PHP, Python, JavaScript, TypeScript, .NET projects at GitHub with Qodana. This repository contains Qodana for Azure, GitHub, CircleCI and Gradle
javascript kotlin python java go php typescript static-code-analysis dotnet static-analysis actions code-review code-quality sarif devsecops code-scanning azure-pipelines github-actions azure-extensions qodana
-
Updated
Jul 23, 2026 - JavaScript
AI Bill of Materials — discover every AI agent, model, and API in your infrastructure
-
Updated
May 24, 2026 - Python
A fast universal code security scanner, written in Rust. Batteries included: supports 12 languages, TUI for triage, secrets, post-quantum audits, diff-aware scans and more 𓃥
rust cli security tree-sitter linter static-analysis pre-commit sarif vulnerability-scanner sast code-security semgrep opengrep
-
Updated
Jul 24, 2026 - Rust
Corax for Java: A general static analysis framework for java code checking.
java security security-audit static-code-analysis static-analysis code-analysis owasp vulnerability software-analysis program-analysis taint-analysis soot abstract-interpretation cwe sarif sast flowdroid
-
Updated
Dec 3, 2024 - Kotlin
Enterprise AI Red Team Platform | 企业级AI红队平台 | 132 MCP Tools | Pure Python Engines | SDK+CLI+MCP | Auto-Download sqlmap/nuclei/ffuf | Production C2 | LLM Enhanced | Docker Sandbox | SARIF CI/CD | 1980 Tests
python cli automation sdk mcp active-directory knowledge-graph penetration-testing mcts kerberos nuclei vulnerability-scanners red-team sarif security-tools c2 docker-sandbox lateral-movement ai-powered llm
-
Updated
Jul 22, 2026 - Python
Lint, format and auto-fix your Groovy / Jenkinsfile / Gradle files using command line
lint groovy gradle nextflow ci groovy-language linter codenarc jenkinsfile hacktoberfest sarif code-quality-analyzer sarif-report megalinter
-
Updated
Jul 24, 2026 - JavaScript
🔧 JetBrains Qodana’s official command line tool
javascript kotlin python java cli php typescript static-code-analysis ci code-review code-quality sarif devsecops code-scanning qodana sarif-report
-
Updated
Jul 24, 2026 - Go
Semantic SBOM/CBOM/AI-BOM diff, quality scoring, and compliance validation for CycloneDX/SPDX — component, license, and vulnerability change analysis, cryptographic inventory grading, PQC readiness (CNSA 2.0, NIST IR 8547), and regulatory gates for NTIA, FDA, EU CRA, BSI TR-03183, EUCC, SSDF, EO 14028, and the EU AI Act.
vex spdx appsec post-quantum-cryptography vulnerability-management sarif oss-compliance licence-management security-compliance sbom pqc cyclonedx software-supply-chain-security sbom-tool sbom-quality aibom cbom cryptographic-inventory eu-ai-act cyber-resilience-act
-
Updated
Jul 24, 2026 - Rust
CI-native security testing for MCP servers. Attack simulation, schema drift detection, and health scoring before agents depend on them.
cli security mcp developer-tools regression-testing sarif code-scanning ai-security github-action supply-chain-security ai-agent model-context-protocol mcp-server agent-security mcp-security schema-drift ai-supply-chain mcp-testing github-code-scanning mcp-ci
-
Updated
Jul 24, 2026 - HTML
AI-native code security auditor on AgentField that proves exploitability with verdicts, traces, and actionable evidence.
python open-source security developer-tools application-security cwe autonomous-agents sarif devsecops ai-agents vulnerability-scanner graphql-security sast ai-security llm agentic-ai agentfield
-
Updated
Jul 8, 2026 - Python
Lockfile-first scanner for compromised npm/PyPI/Maven/Cargo/Go/RubyGems packages — OSV + curated extras feed, SLSA L3, locked-container CI
python go cli npm security rubygems maven pypi supply-chain cargo osv sca sarif lockfile devsecops vulnerability-scanner slsa supply-chain-security dependency-scanner sigstore
-
Updated
May 5, 2026 - Python
Fully open-source SAST scanner supporting a range of languages and frameworks. Integrates with major CI pipelines and IDE such as Azure DevOps, Google CloudBuild, VS Code and Visual Studio. No server required!
-
Updated
Sep 4, 2020 - Python
Detect npm packages compromised in the Shai-Hulud 2.0 supply chain attack (Nov 2025). Scans for 790+ malicious packages, suspicious scripts, TruffleHog activity, SHA1HULUD runners, and secrets exfiltration. GitHub Action with SARIF support.
nodejs npm security sarif devsecops vulnerability-scanner malware-detection credential-theft github-actions open-source-security supply-chain-security sarif-report package-security shai-hulud shai-hulud-detector shai-hulud-attack shai-hulud2-detector shai-hulud2 shai-hulud2-inspector sha1-hulud
-
Updated
Jul 24, 2026 - TypeScript
Modern offline-first Application Security Intelligence Platform for Android, iOS, Flutter and React Native with attack-chain analysis, explainable findings, source exploration, AI-assisted investigation and professional reporting.
python react-native static-analysis reverse-engineering apk owasp cybersecurity beetle application-security pentesting flutter mobsf android-security mobile-security ios-security sarif devsecops sbom fastapi masvs
-
Updated
Jul 21, 2026 - Python
♿ Suite of open and standards-based tools for performing reliable accessibility conformance testing at scale
testing typescript accessibility a11y aria monorepo wcag json-ld earl data-processing customer-facing act sarif horizon2020
-
Updated
Jul 24, 2026 - HTML
A React-based component for viewing SARIF files.
-
Updated
Nov 12, 2024 - TypeScript
The deterministic merge gate for AI-generated agent capability changes — a local-first, static Tool-Use Readiness review for MCP, OpenAPI, and SDK tool surfaces. Open-source CLI + GitHub Action.
mcp static-analysis openapi ci-cd sarif ai-agents policy-as-code github-actions langchain crewai model-context-protocol openai-agents-sdk mcp-security google-adk ai-agent-security agent-governance release-readiness release-gate agent-release-readiness tool-use-readiness
-
Updated
Jul 22, 2026 - Python
ImpactGuard — Lightweight multi-language API impact analyzer
git diff ast call-graph patch risk-assessment impact-analysis sarif multi-language-support sast signature-extraction pre-commit-hooks commit-analysis cicd-integration automatic-patching runtime-tracing tree-siter
-
Updated
Jul 12, 2026 - Python
Improve this page
Add a description, image, and links to the sarif topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the sarif topic, visit your repo's landing page and select "manage topics."