.SARIF File Extension
Static Analysis Results Interchange Format
| Developer | OASIS |
| Popularity |
3.0 | 1 Vote |
What is a SARIF file?
A SARIF file is a report saved in the Static Analysis Results Interchange Format (SARIF), an open standard maintained by OASIS. It contains findings from one or more analysis runs in the JSON standard, including descriptions of detected issues, their locations in source code, and details about the tools that identified them. SARIF files let different code analysis tools share results in a consistent format.
More Information
Developers, software security teams, and quality assurance engineers use SARIF files to review and combine code analysis results. For example, GitHub can import reports from third-party security scanners and display their findings as code scanning alerts in a repository. Other development tools can use SARIF files to show findings alongside source code, helping teams locate and investigate potential problems.
NOTE: OASIS stands for "Organization for the Advancement of Structured Information Standards."
How to open a SARIF file
You can open SARIF files with a text editor, such as Microsoft Notepad, Apple TextEdit, or Notepad++. For a more detailed view, you can use SARIF Viewer extensions for Microsoft Visual Studio or Microsoft Visual Studio Code to examine findings and their locations in source code. You can also upload compatible SARIF files to GitHub code scanning to review reported issues as alerts.