Output formats¶
By default, Razin writes per-skill JSON reports when --output-dir is set.
You can also request CSV and SARIF global exports.
JSON¶
razin scan -r . -o output/ --output-format json
Writes per-skill artifacts:
output/<skill-name>/findings.jsonoutput/<skill-name>/summary.json
JSON details:
findings.jsonis an array of finding objects.- Each finding includes
classification(securityorinformational). - If
rule_overridesadjust severity (raise or cap), finding objects includeseverity_overridemetadata. summary.jsonincludes:counts_by_severitycounts_by_rule- optional
output_filtermetadata (shown,total,filtered,min_severity,security_only) - optional
rule_overridesmetadata - optional rule-selection metadata:
rules_executed,rules_disabled,disable_sources
CSV¶
razin scan -r . -o output/ --output-format csv
Writes:
output/findings.csv
CSV columns:
idskillrule_idseverityclassificationscoreconfidencepathlinetitledescriptionrecommendation
SARIF¶
razin scan -r . -o output/ --output-format sarif
Writes:
output/findings.sarif
SARIF details:
- Each result includes
properties.classification. - Capped findings include
properties.severity_override. - Run-level properties include:
ruleDistribution- optional
filter - optional
ruleOverrides - optional
rules_executed,rules_disabled,disable_sources
Multiple formats in one run¶
razin scan -r . -o output/ --output-format json,csv,sarif
Output filters and artifacts¶
--min-severity and --security-only affect:
- stdout finding rows
- per-skill
findings.json findings.csvfindings.sarif
They do not change which rules run.
Stdout grouping¶
razin scan -r . --group-by skill
razin scan -r . --group-by rule
Cache artifact¶
When output is enabled and caching is on, Razin also writes:
output/.razin-cache.json