search

microsoft / sarif-sdk

.NET code and supporting files for working with the 'Static Analysis Results Interchange Format' (SARIF, see https://github.com/oasis-tcs/sarif-spec)
Other
191 stars 90 forks source link

Specified Schema is 404 #2662

Closed gfs closed 1 year ago

gfs commented 1 year ago

SDK 4.1.0 outputs a schema location of https://schemastore.azurewebsites.net/schemas/json/sarif-2.1.0-rtm.6.json but that link is 404.

image

It looks like this was also reported in BinSkim

shaopeng-gh commented 1 year ago

Acknowledging the problem. We will be able to finalize the rtm 6 ( or removed reference to it if deem not needed ) when we get to the model changes done and it should be published to the schema store when finalized. We don't have an ETA yet.

gfs commented 1 year ago

@shaopeng-gh thabks. Assuming I want to generate valid sarifs in the interim - is it better to replace the .6 version with .5 or just the base 2.1.0? Are the .X version sequential errata to the base spec but without changing its version?

shaopeng-gh commented 1 year ago

RTM.5 is the latest stable version to use. The number after RTM e.g. RTM.5 and RTM.6 are sequential errata to the base spec but without changing its version, yes I believe so.

gfs commented 1 year ago

Looks like this is now resolved and the URL above is now live.