OpenSSF publication

SARIF

Also known as: Static Analysis Results Interchange Format

An OASIS standard JSON format for representing static analysis tool results. Consumed by code-scanning UIs (e.g. GitHub Code Scanning) and produced by linters, scanners, and policy tools such as Scorecard.

Read the publication