#357: Default for associatedComponent

Luke filed #357, where he pointed out that the section on Policies stated that when a toolComponent object represents a policy, its associatedComponent property must be present – but the code example didn’t show associatedComponent.

In the issue, he asked me to fix the example, but I realized that there is a perfectly good default for associatedComponent, namely theTool.driver. This optimizes the common case where there are no extensions.

So I made that change, and produced a change draft

https://github.com/oasis-tcs/sarif-spec/blob/master/Documents/ChangeDrafts/Accepted/sarif-v2.0-issue-357-associatedComponent.docx

and merged it into the provisional draft:

https://github.com/oasis-tcs/sarif-spec/blob/master/Documents/ProvisionalDrafts/sarif-v2.0-csd02-provisional.docx

This seems to me an uncontroversial change, but it slightly exceeds editorial discretion, so please take a look at the change draft and let me know if you disagree. Remember, you can raise concerns right up until the time we vote the provisional draft out as CSD.2 (which we hope to do at TC #35 on 4/17) – but please do try to raise any concerns before 4/10 so I have plenty of time to address them.

Thanks,

Larr

sarif message