OASIS Mailing List ArchivesView the OASIS mailing list archive below
or browse/search using MarkMail.


Help: OASIS Mailing Lists Help | MarkMail Help

sarif message

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]

Subject: RE: run.stableId

I think we should add it, for precisely the reason you cite, bucketing at the stable id level. You might do this in order to organize all tool breaks for both the x86 and amd64 instances of a tool run.


Nightly security tools run for Contoso service

  • X86 : 0 breaks
  • Amd64: 10 active issues


From: Larry Golding (Comcast) <larrygolding@comcast.net>
Sent: Friday, April 20, 2018 11:17 AM
To: Michael Fanning <Michael.Fanning@microsoft.com>; 'James A. Kupsch' <kupsch@cs.wisc.edu>; sarif@lists.oasis-open.org
Subject: RE: run.stableId


Ping on this. Do we really need the namespacing, given my argument below?


From: Larry Golding (Comcast) <larrygolding@comcast.net>
Sent: Wednesday, April 18, 2018 12:19 PM
To: Michael Fanning <Michael.Fanning@microsoft.com>; 'James A. Kupsch' <kupsch@cs.wisc.edu>; 'sarif@lists.oasis-open.org' <sarif@lists.oasis-open.org>
Subject: run.stableId


As I understand it, the goal is to bucket together runs of the same type, so that a result management system can:


  1. Open a SARIF log file,
  2. Find run.stableId,
  3. Find the most recent run of the same type, and
  4. Copy run.id from the earlier run into run.baselineId of the current run.


That doesn’t require namespaced tags. It works whether run.stableId contains "Nightly security tools run/x64 release optimized" or whether it contains "Nightly security tools run x64 release optimized".


The only reason you’d need namespacing is if there’s some other scenario that needs to bucket together every "Nightly security tools run", regardless of the build configuration.



[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]