SARIF: The Format That Connects Your AI Auditor to GitHub Code Scanning

You've built a tool that finds security issues. Maybe it's an AI auditor like spectr-ai, maybe it's a custom linter, maybe it's a script that checks for hardcoded secrets. The tool works great locally. But how do you get those findings into GitHub so they show up as annotations on pull requests, in the Security tab, and in code scanning alerts? The answer is SARIF — Static Analysis Results Interchange Format. It's a JSON-based standard for representing static analysis results, and GitHub Code Sc