<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>SARIF on Kyle Versluis</title><link>https://ktalons.github.io/tags/sarif/</link><description>Recent content in SARIF on Kyle Versluis</description><generator>Hugo</generator><language>en</language><lastBuildDate>Mon, 28 Sep 2026 20:00:00 -0700</lastBuildDate><atom:link href="https://ktalons.github.io/tags/sarif/index.xml" rel="self" type="application/rss+xml"/><item><title>ComplyRoll</title><link>https://ktalons.github.io/projects/complyroll/</link><pubDate>Sun, 23 Aug 2026 00:00:00 +0000</pubDate><guid>https://ktalons.github.io/projects/complyroll/</guid><description>Compiles STIG, SCAP, and SARIF scanner output into schema-valid FedRAMP 20x vulnerability reports, with every response clock read from FedRAMP&amp;rsquo;s published rules dataset.</description></item><item><title>ComplyRoll: SARIF Joins In</title><link>https://ktalons.github.io/blog/complyroll-sarif-joins-in/</link><pubDate>Mon, 28 Sep 2026 20:00:00 -0700</pubDate><guid>https://ktalons.github.io/blog/complyroll-sarif-joins-in/</guid><description>Phase 1 is closed. FedRAMP fixed a gap in its rules dataset that ComplyRoll turned up. Phase 2 opens with SARIF input and a CISA KEV clock.</description></item></channel></rss>