sarif-report

🦙 MegaLinter analyzes 50 languages, 22 formats, 21 tooling formats, excessive copy-pastes, spelling mistakes and security issues in your repository sources with a GitHub Action, other CI tools or locally.

Lint, format and auto-fix your Groovy / Jenkinsfile / Gradle files using command line

🔧 JetBrains Qodana’s official command line tool

Telling tales on you for leaking secrets!

Go library for SARIF - Static Analysis Results Interchange Format

GitHub Action to check for vulnerabilities in your container image

Static analysis and attack-surface scanner for AI agents — SAST for prompts, tools, MCP servers, and agent workflows. Detects capabilities, prompt risks, tool permissions, and governance gaps before deployment.

This action uses govulncheck to perform a scan of the code, afterwards it will parse the output and transform it into an Sarif Report, which will be uploaded to Github using the code-scanning API.

Machine output for Mix tasks

Run this GitHub action to validate your Kubernetes resources with the Monokle SARIF validator.

A GO package to create and manipulate SARIF logs

Converts Azure Container Scan Action output to SARIF, for an easier integration with tools like GitHub Code Scanning

AI-powered triage for SAST findings.

Validate your IAM Policies and SCPs with AWS Policy Validator, and convert those results into SARIF documents for reporting.

VScode extension for analyzing the energy state of Python, TypeScript, Kotlin, C++, C#, and F# code

A simple, zero-dependency Node.js CLI that converts SARIF reports into interactive, shareable HTML reports with file explorer and collapsible issue details.

Action that converts Azure Container Scan Action output to SARIF

A GitHub Action that automates the scanning of Java code, identifying the CWEs present in the vulnerable methods.

Detectors that find Oracle to PostgreSQL migration gaps ora2pg misses or converts incorrectly, each verified against real ora2pg and PostgreSQL runs.

Effortlessly manage GitHub issues with our CLI tool. Create, organize, and optimize issues in bulk while handling dependencies. 🐙✨