Introducing Agents.·Read
OverviewAgentsWorkflowsExecutionDeveloper ToolsSecurityLibrary
Updated Oct 16, 2026

Utilities

Convert SARIF findings to CSV

sarif-to-csv is a SARIF finding conversion node powered by Microsoft SARIF Tools.

Agent
Review findings in a spreadsheetNormalize path prefixesPass findings to CSV analysis

overview

What sarif-to-csv does

Connect one SARIF report and convert its findings with the native Microsoft SARIF Tools csv command. The optional trim input removes a supplied path prefix from finding paths. Only CSV conversion is exposed.

The node runs sarif csv only. It does not expose SARIF Tools merge, summary or other subcommands. Output is a CSV file rather than a new SARIF document.

Input or native processing failures fail the operation. The operation keeps the supplied source unchanged.

This operation uses 3.0.5. Upstream license: MIT. The source link identifies the program used by this node.

source github.com/microsoft/sarif-tools

use cases

Where sarif-to-csv fits

Review findings in a spreadsheet

Turn scanner SARIF into CSV findings for a tabular review.

Normalize path prefixes

Remove a known source-root prefix with the trim input.

Pass findings to CSV analysis

Feed the returned CSV into an existing table-processing step.

reference

sarif-to-csv inputs and flags

2 inputs
NameTypeFlagDescription
reportFILE·SARIF report file to convert.
trimSTRING--trimRemove this prefix from finding paths.

Showing key inputs. sarif-to-csv exposes 2 inputs in total.

example

Run sarif-to-csv

sarif-to-csv · command
sarif csv ./input.txt --trim /workspace/ --output ./output

guidance

Choosing sarif-to-csv

Use this operation to review SARIF findings in tabular tools. A scanner produces SARIF; this conversion does not rescan source or validate whether findings are correct.

jq

Can query SARIF JSON; this node produces the native SARIF Tools CSV table.

faq

sarif-to-csv questions

report: SARIF report file to convert. trim: Remove this prefix from finding paths.

CSV findings. Native processing must succeed before an output artifact is returned.

The node runs sarif csv only. It does not expose SARIF Tools merge, summary or other subcommands. Output is a CSV file rather than a new SARIF document.

Use this operation to review SARIF findings in tabular tools. A scanner produces SARIF; this conversion does not rescan source or validate whether findings are correct.

The image repository also contains a digest-bound source/notices artifact. Download it with oras pull docker.io/nenadzaric/skills-intel-sarif-to-csv@sha256:d084b872276149b334366b7d032ee47c276d0f9121644576909ba53126b3f0ac. The bundle includes the build recipe, licenses, copied notices and component-source directions. Bundle SHA256: 5b9845777d64ba8269906d75e059cc837668d7280f3841451c1a2ef468879ee3. Follow its source directions for upstream archives and patches. Image and source/notices repository.

related

More Utilities tools

  1. browser-fetch

    Headless Chromium render: requested URL, final URL, status, and title next to the page.

  2. cewl

    Spider a URL and return a wordlist for password crackers.

  3. csvkit

    SQL on one CSV. The table name is the file stem.

  4. dnsgen

    Wordlist and mined-word subdomain permutation.

  5. duckdb

    In-process SQL on CSV, JSON, and Parquet. No server.

  6. edge-tts

    Microsoft Edge neural speech from text or a script file. No API key.

Run sarif-to-csv yourself

The synthetic run checks csv findings. The saved verifier records the result; this text page does not reproduce the native artifact. The command shown is the container entrypoint with example paths, not a host-installed CLI command.

Open sarif-to-csv in the libraryBuild a workflow with it

Facts on this page come from the live Trickest tool library.