RE: My response to the "severity" issue

[Michael Fanning <Michael.Fanning@microsoft.com>]

I believe that you’ve misunderstood my reply. TLDR: this is, in fact, a discussion around priorization/ranking, just as the title of #20 indicates that it concerned. As noted in #20, result.level is our rough approximation around severity.

 

From: Larry Golding (Myriad Consulting Inc) <v-lgold@microsoft.com>
Sent: Thursday, November 15, 2018 11:27 AM
To: 'Paul Anderson (paul@grammatech.com)' <paul@grammatech.com>; Michael Fanning <Michael.Fanning@microsoft.com>
Cc: OASIS SARIF TC Discussion List <sarif@lists.oasis-open.org>
Subject: My response to the "severity" issue
Importance: High

 

I re-read the severity/priority discussions, then provided a detailed response and proposal in https://github.com/oasis-tcs/sarif-spec/issues/280 (“Resurrect severity of rules and results”).

 

Larry