microsoft/sarif-sdk

Specified Schema is 404

gfs opened this issue · 4 comments

gfs commented

SDK 4.1.0 outputs a schema location of https://schemastore.azurewebsites.net/schemas/json/sarif-2.1.0-rtm.6.json but that link is 404.

image

It looks like this was also reported in BinSkim

Acknowledging the problem. We will be able to finalize the rtm 6 ( or removed reference to it if deem not needed ) when we get to the model changes done and it should be published to the schema store when finalized. We don't have an ETA yet.

gfs commented

@shaopeng-gh thabks. Assuming I want to generate valid sarifs in the interim - is it better to replace the .6 version with .5 or just the base 2.1.0? Are the .X version sequential errata to the base spec but without changing its version?

RTM.5 is the latest stable version to use.
The number after RTM e.g. RTM.5 and RTM.6 are sequential errata to the base spec but without changing its version, yes I believe so.

gfs commented

Looks like this is now resolved and the URL above is now live.