Profile

Larry, I agree, it is a reasonable statement. Here I consolidated the edits: "SARIF represents a different strategy for common representation of the results of static analysis. The Object Management Group's Tool Output Integration Format (TOIF) is an existing ...

Larry, Since SARIF is centric to the SCA space and TOIF is not, when it comes to a focused comparison restricted to the SCA space, the two distinctions lowest common denominator/advanced tools and convert / modify capture the key differences quite well. The distinction of convert ...

David, OK, we could apply the characterization that I have originally used for TOIF for both TOIF and SARIF as you suggest. In this case I would like to add one more sentence to better characterize TOIF s objective (see below). I can promote this write-up with the OMG community. Best regards, Nick > ...

Hello all, I like this revision. May I suggest the following additions (inline): > On Sep 6, 2019, at 11:22 AM, David Keaton wrote: > > Here's what we have so far. This is sufficient to fulfill our requirement for a standards relationship statement, though comments are still welcome. > > "SARIF represents ...

Hello all, I have recently uploaded a document where I am proposing to extend SARIF with measurements for each result object. I propose to distinguish two kinds of measurements: tool-specific and standard (common) ones. Each measurement is a pair (value, measureId). I propose to use the OMG Structured ...