Breaking Down Large SARIF Files for GitHub Advanced Security Uploads

[zrehman-sndk]

Description:
We are hitting GitHub’s SARIF upload limits (max runs, rules, tools, and flows per file). To stay compliant with these limits, we need a way to split large SARIF files into smaller, valid chunks before upload.

Questions:

1. What’s the recommended approach for using SARIF Multitool or the SARIF SDK to dynamically partition large SARIF files?
2. Are there best practices or existing utilities for segmenting SARIF by run, tool, or file size while preserving data integrity for GitHub Advanced Security code scanning?
3. Any examples or scripts that demonstrate automating this process as part of CI/CD?

[sthagen]

I suggest we discuss this in the December meeting of the TC.