Microsoft would definitely be interested in exploring this possibility. I was just pinged this week on the possibilities using SARIF for capturing code coverage results (which are apparently of significant compliance interest for the automotive industry). This would be a good ‘seed’ scenario for a dynamic analysis initiative (along with profiling, web testing, etc.). Pull us in when you’re ready to talk. I will help connect the conversation with MS teams who are stakeholders in these areas.
https://en.wikipedia.org/wiki/ISO_26262 From:
sarif@lists.oasis-open.org <
sarif@lists.oasis-open.org> On Behalf Of Yekaterina O'Neil Sent: Thursday, July 18, 2019 11:16 AM To:
sarif@lists.oasis-open.org Subject: [sarif] your thoughts on DARIF Hi all, As we are hopefully approaching the release of the first version of the SARIF standard, I wanted to bring up the conversation we had earlier about standardizing dynamic results. I was curious who on this list would potentially be interested in pursuing a DARIF some time in the future. Thanks! k