[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]
Subject: Question about specifying file locations
All (but especially Larry): We're collaborating with a partner with a tool that is producing
Sarif. Their tool analyzes .jar files, but reports results in
terms of source code locations. The question is how to produce
valid Sarif in that situation. Right now they specify "file:///c:/.../foo.jar#/org/.../bar.java"
(this is pre-11/14 Sarif), which implies to me that the bar.java
file is expected to be explicitly textually embedded with in the
foo.jar file. ÂÂ { Does my alternative make better sense? -- Paul Anderson, VP of Engineering, GrammaTech, Inc. 531 Esty St., Ithaca, NY 14850 Tel: +1 607 273-7340 x118; http://www.grammatech.com |
[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]