And I quote "... or open a new initiative related to dynamic analysis." SARIF was the 'not sure' reply to the survey. So it could go in a good direction... ---------- Forwarded message --------- From: Michael Fanning <
Michael.Fanning@microsoft.com > Date: Thu, Apr 16, 2020 at 5:12 PM Subject: RE: [sarif] RE: [EXTERNAL] Re: [sarif] Static Analysis Results Interchange Format (SARIF) Version 2.1.0 OASIS Standard published To: David Keaton <
dmk@dmk.com >, Larry Golding (Myriad Consulting Inc) <
v-lgold@microsoft.com >, Chet Ensign <
chet.ensign@oasis-open.org >, OASIS SARIF TC Discussion List <
sarif@lists.oasis-open.org > Congratulations, everyone! Just an FYI, Microsoft will be entering a quiet period for the remainder of the fiscal year on the SARIF standard (meaning we won't be actively engaged in any standards-related work, though we'll have plenty of internal activity utilizing the standard). I have requested some standards funding that, if approved, will light up on July 1. I hope that folks on the TC will be open to looking at making contributions for future work then. We may tinker w/extensions to the standard or open a new initiative related to dynamic analysis. Will keep everyone apprised, Michael -----Original Message----- From:
sarif@lists.oasis-open.org <
sarif@lists.oasis-open.org > On Behalf Of David Keaton Sent: Thursday, April 9, 2020 9:16 AM To: Larry Golding (Myriad Consulting Inc) <
v-lgold@microsoft.com >; Chet Ensign <
chet.ensign@oasis-open.org >; OASIS SARIF TC Discussion List <
sarif@lists.oasis-open.org > Subject: Re: [sarif] RE: [EXTERNAL] Re: [sarif] Static Analysis Results Interchange Format (SARIF) Version 2.1.0 OASIS Standard published Thanks, Larry! And thank you for your tireless work on the document and excellent wordsmithing. In fact, the whole TC deserves thanks for the many substantial contributions and for sticking with it. Even those whose jobs required them to leave were extremely helpful while they were able to be with us. Everybody pat yourselves on the back! David On 4/9/20 8:21 AM, Larry Golding (Myriad Consulting Inc) wrote: > And thank you, David, for your years-long efforts in guiding us through the standards process. We were privileged to have someone with such broad experience and deep expertise as our mentor. > > Best regards, > Larry > > -----Original Message----- > From:
sarif@lists.oasis-open.org <
sarif@lists.oasis-open.org > On > Behalf Of David Keaton > Sent: Wednesday, April 8, 2020 5:13 PM > To: Chet Ensign <
chet.ensign@oasis-open.org >; OASIS SARIF TC > Discussion List <
sarif@lists.oasis-open.org > > Subject: [EXTERNAL] Re: [sarif] Static Analysis Results Interchange > Format (SARIF) Version 2.1.0 OASIS Standard published > > Thanks, Chet! It's celebration time! > > David > > On 4/8/20 7:26 AM, Chet Ensign wrote: >> OASIS Members and other interested parties, >> >> OASIS is pleased to announce the publication of its newest OASIS >> Standard, approved by the members on 27 March 2020: >> >> Static Analysis Results Interchange Format (SARIF) Version 2.1.0 >> OASIS Standard >> 27 March 2020 >> >> Software developers use a variety of tools to assess the quality of >> their programs. These tools can report results on qualities such as >> validity, security, performance, compliance with legal requirements, >> etc. To form an overall picture of program quality, developers often >> need to aggregate the results produced by all of these tools, a task >> made difficult when each tool produces output in a different format. >> >> SARIF defines a standard format for the output of static analysis >> tools in order to: >> - Comprehensively capture the range of data produced by commonly used >> static analysis tools. >> - Reduce the cost and complexity of aggregating the results of >> various analysis tools into common workflows. >> - Represent analysis results for all kinds of programming artifacts, >> including source code and object code. >> >> The specification and related files are available here: >> >> Editable source (Authoritative): >>
https://nam06.safelinks.protection.outlook.com/?url= > >> s >> . oasis-open.org %2Fsarif%2Fsarif%2Fv2.1.0%2Fos%2Fsarif-v2.1.0-os.docx& >> a >> mp;data= href=
http://40microsoft.com rel= noreferrer target= _blank >40microsoft.com %7C4a984bedfb354c3b53e908d7d >> c >> 1ab934%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C63721988266895152 >> 7 >> &sdata=b1EPA50ereJqU1LrA9bLpeimSN2ArD%2BaF6NYDWjTByU%3D&reser >> v >> ed=0 >> >> HTML: >>
https://nam06.safelinks.protection.outlook.com/?url= > >> s >> . oasis-open.org %2Fsarif%2Fsarif%2Fv2.1.0%2Fos%2Fsarif-v2.1.0-os.html& >> a >> mp;data= href=
http://40microsoft.com rel= noreferrer target= _blank >40microsoft.com %7C4a984bedfb354c3b53e908d7d >> c >> 1ab934%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C63721988266895152 >> 7 >> &sdata=oCxG04RB2QaO3zN%2FUpW7N15i7sTB0LY0SuGsLzyrnck%3D&reser >> v >> ed=0 >> >> PDF: >>
https://nam06.safelinks.protection.outlook.com/?url= > >> s >> . oasis-open.org %2Fsarif%2Fsarif%2Fv2.1.0%2Fos%2Fsarif-v2.1.0-os.pdf&a >> m >> p;data= href=
http://40microsoft.com rel= noreferrer target= _blank >40microsoft.com %7C4a984bedfb354c3b53e908d7dc >> 1 >> ab934%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637219882668951527 >> & >> amp;sdata=ne%2BaVCffoT8KKOF3UE9TfEk27AnN7ZdGdQpPQPCgthM%3D&reserv >> e >> d=0 >> >> JSON schemas: >>
https://nam06.safelinks.protection.outlook.com/?url= > >> s >> . oasis-open.org %2Fsarif%2Fsarif%2Fv2.1.0%2Fos%2Fschemas%2F&data= > >> 2 >> %7C01%7Cv-lgold% 40microsoft.com %7C4a984bedfb354c3b53e908d7dc1ab934%7C >> 7 >> 2f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637219882668961522&sdat >> a >> =WBVverEh24CGsUqXDjJGL%2FzIx959SMP0pH4GmaVabG8%3D&reserved=0 >> >> Distribution ZIP files >> >> For your convenience, OASIS provides a complete package of the prose >> specification and related files in a ZIP distribution file. You can >> download the ZIP file here: >> >>
https://nam06.safelinks.protection.outlook.com/?url= > >> s >> . oasis-open.org %2Fsarif%2Fsarif%2Fv2.1.0%2Fos%2Fsarif-v2.1.0-os.zip&a >> m >> p;data= href=
http://40microsoft.com rel= noreferrer target= _blank >40microsoft.com %7C4a984bedfb354c3b53e908d7dc >> 1 >> ab934%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637219882668961522 >> & >> amp;sdata=yzJVKCLP4vATw5aPIKEG%2F84VIaX0QTI2uJYjp6Esr7o%3D&reserv >> e >> d=0 >> >> Our congratulations to the members of the SARIF TC on achieving this >> milestone. >> >> -- >> >> /chet >> ---------------- >> Chet Ensign >> Chief Technical Community Steward >> OASIS: Advancing open source & open standards for the information >> society >>
https://nam06.safelinks.protection.outlook.com/?url= >. >> o >> asis-open.org %2F&data= href=
http://40microsoft.com rel= noreferrer target= _blank >40microsoft.com %7C4a984be >> d >> fb354c3b53e908d7dc1ab934%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7 >> C >> 637219882668961522&sdata=BmCiTximwbWr%2BlZZuPc%2Fq4nBYkdrSxveehJV >> N >> Xj%2FbyM%3D&reserved=0 >> >> Mobile: +1 201-341-1393 > > > --------------------------------------------------------------------- > To unsubscribe from this mail list, you must leave the OASIS TC that generates this mail. Follow this link to all your TCs in OASIS at: >
https://nam06.safelinks.protection.outlook.com/?url= >. > oasis-open.org %2Fapps%2Forg%2Fworkgroup%2Fportal%2Fmy_workgroups.php&a > mp;data= href=
http://40microsoft.com rel= noreferrer target= _blank >40microsoft.com %7C880f04f60f7c4fe467 > 0408d7dca150d9%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C6372204580 > 50941994&sdata=Z20ZFZT1NAcqMqCiPB64TZ9usM2MGFTCtDXqG%2BgR658%3D&am > p;reserved=0 > --------------------------------------------------------------------- To unsubscribe from this mail list, you must leave the OASIS TC that generates this mail. Follow this link to all your TCs in OASIS at:
https://nam06.safelinks.protection.outlook.com/?url= > -- /chet ---------------- Chet Ensign Chief Technical Community Steward OASIS: Advancing open source & open standards for the information society
http://www.oasis-open.org Mobile: +1 201-341-1393