I pushed a change draft for Issue #175 : Decide on policy for fileLocation vs. URI. Documents/ChangeDrafts/Active/sarif-v2.0-issue-175-uri-vs-fileLocation.docx I will move its adoption at TC #19 on June 6 th . We decided on the policy at TC #18: use fileLocation objects for non-deterministic URIs, and URI strings for deterministic URIs. The change draft implements that decision. Thanks, Larry