SARIF + servasec
Generic SARIF format parser for any SARIF-compliant security tool output.
What is SARIF?
The SARIF (Static Analysis Results Interchange Format) parser in servasec accepts output from any security tool that produces SARIF-compliant output. This covers hundreds of additional scanners beyond the natively supported ones, including tools from Microsoft, GitHub, and many commercial vendors. Servasec auto-detects and normalizes SARIF results into unified findings.
OASIS SARIF standard supportHundreds of compatible toolsAuto-detection and normalizationNo custom parser neededCI/CD pipeline integration
Integrate SARIF with servasec
1
Generate SARIF output
Run your SARIF-compatible tool and output to a .sarif file.
# Example with a SARIF-compatible tool your-tool --sarif -o results.sarif
2
Push to servasec
Send the SARIF file to servasec.
curl -X POST "$SSC_PUBLIC_URL/api/ingest" \ -H "X-Api-Token: $API_TOKEN" \ -F "[email protected]"
What servasec adds to SARIF
Auto-detection
Servasec automatically identifies SARIF format and normalizes findings.
Unified dashboard
View SARIF findings alongside native scanner results in one place.
Cross-tool correlation
Correlate SARIF findings with results from other scanners.