Re: [sarif] First Draft Statement of Relationship to Similar Work

[David Keaton <dmk@dmk.com>]

     Here's what we have so far.  This is sufficient to fulfill our 
requirement for a standards relationship statement, though comments are 
still welcome.

"SARIF represents a different strategy for common representation of the 
results of static analysis.  The Object Management Group's Tool Output 
Integration Format (TOIF) is an existing standard in this space.  Its 
strategy involves creating adapters from various tools to the reporting 
format, and as such, it is focused on integrating the diverse input 
formats into the lowest common denominator representation without having 
to modify the original tools.

"By contrast, SARIF aims to support the full capabilities of advanced 
tools, which generally requires modifying the tools to produce SARIF 
output natively."

					David

P.S.  Thanks to Nick Mansourov for the insight about TOIF being designed 
to produce the lowest common denominator output for compatibility's 
sake, as shown in this submission of his to the SARIF TC.

https://www.oasis-open.org/apps/org/workgroup/sarif/download.php/62623/Alignment_SARIF_TOIF.pdf