I pushed a change draft for Issue #138 , “Consider a download/install URI for the tool”. Documents/ChangeDrafts/Active/sarif-v2.0-issue-138-tool-downloadUri.docx Here’s the entire change: 3.12.7 downloadUri property A tool object MAY contain a property named downloadUri whose value is a string containing the absolute URI [ RFC3986 ] from which the tool can be downloaded. I’ll move its approval at TC #17 on May 16 th . Larry