findings-ingest
findings-ingest reads SARIF and OSV-Scanner reports that stay within your CI pipeline and files them as security findings in Noru against existing risks, automatically closing findings no longer reported. It prevents double-ingestion by only accepting reports explicitly marked as not reaching the forge's alert store, and derives finding identity from logical code location rather than line numbers to survive refactoring.
Install
Source: https://github.com/noru-tech/noru-grc-engineering/tree/HEAD/plugins/findings-ingest
What it's made of
3 commands · 1 skill · 1 MCP server
- Commands
- 3
- Agents
- 0
- Skills
- 1
- MCP servers
- 1
- Hooks
- 0
What it needs & plugs into
- API keys
- none
- Paid services
- Noru
- External tools
- none
- Talks to
api.noru.tech
Analyzed . Facts extracted from the plugin's files. Prose generated by claude-haiku-4-5-20251001.
Is this your plugin?
Claim it to keep the card accurate and enter the weekly contest. Requires signing in as the GitHub owner (noru-tech).