Thank you, Chet, and congratulations, SARIF TC!
Now on to the next step. David , is now the time I can make the small set of non-substantive changes in preparation to sending out to OASIS?
Larry
From:
sarif@lists.oasis-open.org <
sarif@lists.oasis-open.org>
On Behalf Of Chet Ensign
Sent: Thursday, August 8, 2019 12:54 PM
To:
tc-announce@lists.oasis-open.org;
members@lists.oasis-open.org; OASIS SARIF TC Discussion List <
sarif@lists.oasis-open.org>;
sarif-comment@lists.oasis-open.org Subject: [sarif] Static Analysis Results Interchange Format (SARIF) V2.1.0 from the SARIF TC is an approved OASIS Committee Specification
OASIS Members and other interested parties,
OASIS is pleased to announce that Static Analysis Results Interchange Format (SARIF) Version 2.1.0 from the Static Analysis Results Interchange Format (SARIF) TC [1] has been approved as an OASIS Committee Specification.
Software developers use a variety of tools to assess the quality of their programs. These tools can report results on qualities such as validity, security, performance, compliance with legal requirements, etc. To form an overall picture of program quality,
developers often need to aggregate the results produced by all of these tools, a task made difficult when each tool produces output in a different format.
SARIF defines a standard format for the output of static analysis tools in order to:
- Comprehensively capture the range of data produced by commonly used static analysis tools.
- Reduce the cost and complexity of aggregating the results of various analysis tools into common workflows.
- Represent analysis results for all kinds of programming artifacts, including source code and object code.
This Committee Specification is an OASIS deliverable, completed and approved by the TC and fully ready for testing and implementation.
The prose specifications and related files are available here:
Static Analysis Results Interchange Format (SARIF) Version 2.1.0
Committee Specification 01
23 July 2019
Editable source (Authoritative):
https://docs.oasis-open.org/sarif/sarif/v2.1.0/cs01/sarif-v2.1.0-cs01.docx (Authoritative)
HTML:
https://docs.oasis-open.org/sarif/sarif/v2.1.0/cs01/sarif-v2.1.0-cs01.html PDF:
https://docs.oasis-open.org/sarif/sarif/v2.1.0/cs01/sarif-v2.1.0-cs01.pdf JSON schemas:
https://docs.oasis-open.org/sarif/sarif/v2.1.0/cs01/schemas/ Distribution ZIP file
For your convenience, OASIS provides a complete package of the prose specification and related files in a ZIP distribution file. You can download the ZIP file here:
https://docs.oasis-open.org/sarif/sarif/v2.1.0/cs01/sarif-v2.1.0-cs01.zip Members of the SARIF TC [1] approved this specification by Special Majority Vote. The specification had been released for public review as required by the TC Process [2]. The vote to approve as a Committee Specification passed [3], and the document is now available
online in the OASIS Library as referenced above.
Our congratulations to the TC on achieving this milestone and our thanks to the reviewers who provided feedback on the specification drafts to help improve the quality of the work.
========== Additional references:
[1] Static Analysis Results Interchange Format (SARIF) TC
https://www.oasis-open.org/committees/sarif/ [2] Public reviews:
* 30-day public review, 05 June 2019:
https://lists.oasis-open.org/archives/members/201906/msg00002.html - Comment resolution log:
http://docs.oasis-open.org/sarif/sarif/v2.1.0/csprd01/sarif-v2.1.0-csprd01-comment-resolution-log.txt [3] Approval ballot:
https://www.oasis-open.org/committees/ballot.php?id=3416 --
/chet
----------------
Chet Ensign
Chief Technical Community Steward
OASIS: Advancing open standards for the information society
http://www.oasis-open.org Mobile: +1 201-341-1393