sarif-2.0.0.json
Static Analysis Results Interchange Format (SARIF) version 2
| Type | object |
|---|---|
| Schema URL | https://catalog.lintel.tools/schemas/schemastore/sarif-2-0-0-json/latest.json |
| Source | https://www.schemastore.org/sarif-2.0.0.json |
Validate with Lintel
npx @lintel/lintel checkStatic Analysis Results Format (SARIF) Version 2.0.0 JSON Schema: a standard format for the output of static analysis tools.
Properties
The SARIF format version of this log file.
The URI of the JSON schema corresponding to the version.
Definitions
A file relevant to a tool invocation or to a result.
Specifies the location of a file.
2 nested properties
A string containing a valid relative or absolute URI.
A string which indirectly specifies the absolute URI with respect to which a relative URI in the "uri" property is interpreted.
Encapsulates a message intended to be read by the end user.
5 nested properties
A plain text message string.
The resource id for a plain text message string.
A rich text message string.
The resource id for a rich text message string.
An array of strings to substitute into the message string.
An array of rectangles specifying areas of interest within the image.
A set of threadFlows which together describe a pattern of code execution relevant to detecting a result.
An array of one or more unique threadFlow objects, each of which describes the progress of a program through a thread of execution.
Encapsulates a message intended to be read by the end user.
5 nested properties
A plain text message string.
The resource id for a plain text message string.
A rich text message string.
The resource id for a rich text message string.
An array of strings to substitute into the message string.
Key/value pairs that provide additional information about the code flow.
1 nested properties
A set of distinct strings that provide additional information.
[]Describes how a converter transformed the output of a static analysis tool from the analysis tool's native output format into the SARIF format.
The analysis tool that was run.
9 nested properties
The name of the tool.
The name of the tool along with its version and any other useful identifying information, such as its locale.
The tool version, in whatever format the tool natively provides.
The tool version in the format specified by Semantic Versioning 2.0.
The binary version of the tool's primary executable file (for operating systems such as Windows that provide that information).
The absolute URI from which the tool can be downloaded.
A version that uniquely identifies the SARIF logging component that generated this file, if it is versioned separately from the tool.
The tool language (expressed as an ISO 649 two-letter lowercase culture code) and region (expressed as an ISO 3166 two-letter uppercase subculture code associated with a country or region).
Key/value pairs that provide additional information about the tool.
1 nested properties
A set of distinct strings that provide additional information.
[]The runtime environment of the analysis tool run.
25 nested properties
The command line used to invoke the tool.
An array of strings, containing in order the command line arguments passed to the tool from the operating system.
The locations of any response files specified on the tool's command line.
A set of files relevant to the invocation of the tool.
The date and time at which the run started. See "Date/time properties" in the SARIF spec for the required format.
The date and time at which the run ended. See "Date/time properties" in the SARIF spec for the required format.
The process exit code.
A list of runtime conditions detected by the tool during the analysis.
A list of conditions detected by the tool that are relevant to the tool's configuration.
The reason for the process exit.
The name of the signal that caused the process to exit.
The numeric value of the signal that caused the process to exit.
The reason given by the operating system that the process failed to start.
A value indicating whether the tool's execution completed successfully.
The machine that hosted the analysis tool run.
The account that ran the analysis tool.
The process id for the analysis tool run.
Specifies the location of a file.
2 nested properties
A string containing a valid relative or absolute URI.
A string which indirectly specifies the absolute URI with respect to which a relative URI in the "uri" property is interpreted.
Specifies the location of a file.
2 nested properties
A string containing a valid relative or absolute URI.
A string which indirectly specifies the absolute URI with respect to which a relative URI in the "uri" property is interpreted.
The environment variables associated with the analysis tool process, expressed as key/value pairs.
{}Specifies the location of a file.
2 nested properties
A string containing a valid relative or absolute URI.
A string which indirectly specifies the absolute URI with respect to which a relative URI in the "uri" property is interpreted.
Specifies the location of a file.
2 nested properties
A string containing a valid relative or absolute URI.
A string which indirectly specifies the absolute URI with respect to which a relative URI in the "uri" property is interpreted.
Specifies the location of a file.
2 nested properties
A string containing a valid relative or absolute URI.
A string which indirectly specifies the absolute URI with respect to which a relative URI in the "uri" property is interpreted.
Specifies the location of a file.
2 nested properties
A string containing a valid relative or absolute URI.
A string which indirectly specifies the absolute URI with respect to which a relative URI in the "uri" property is interpreted.
Key/value pairs that provide additional information about the invocation.
1 nested properties
A set of distinct strings that provide additional information.
[]The locations of the analysis tool's per-run log files.
Represents a directed edge in a graph.
A string that uniquely identifies the edge within its graph.
Identifies the source node (the node at which the edge starts).
Identifies the target node (the node at which the edge ends).
Encapsulates a message intended to be read by the end user.
5 nested properties
A plain text message string.
The resource id for a plain text message string.
A rich text message string.
The resource id for a rich text message string.
An array of strings to substitute into the message string.
Key/value pairs that provide additional information about the edge.
1 nested properties
A set of distinct strings that provide additional information.
[]Represents the traversal of a single edge during a graph traversal.
Identifies the edge being traversed.
Encapsulates a message intended to be read by the end user.
5 nested properties
A plain text message string.
The resource id for a plain text message string.
A rich text message string.
The resource id for a rich text message string.
An array of strings to substitute into the message string.
The values of relevant expressions after the edge has been traversed.
The number of edge traversals necessary to return from a nested graph.
Key/value pairs that provide additional information about the edge traversal.
1 nested properties
A set of distinct strings that provide additional information.
[]A string that identifies the kind of exception, for example, the fully qualified type name of an object that was thrown, or the symbolic name of a signal.
A plain text message that describes the exception.
A call stack that is relevant to a result.
3 nested properties
An array of stack frames that represent a sequence of calls, rendered in reverse chronological order, that comprise the call stack.
Encapsulates a message intended to be read by the end user.
5 nested properties
A plain text message string.
The resource id for a plain text message string.
A rich text message string.
The resource id for a rich text message string.
An array of strings to substitute into the message string.
Key/value pairs that provide additional information about the stack.
1 nested properties
A set of distinct strings that provide additional information.
[]An array of exception objects each of which is considered a cause of this exception.
References to external files that should be inlined with the content of a root log file.
Specifies the location of a file.
2 nested properties
A string containing a valid relative or absolute URI.
A string which indirectly specifies the absolute URI with respect to which a relative URI in the "uri" property is interpreted.
Specifies the location of a file.
2 nested properties
A string containing a valid relative or absolute URI.
A string which indirectly specifies the absolute URI with respect to which a relative URI in the "uri" property is interpreted.
Specifies the location of a file.
2 nested properties
A string containing a valid relative or absolute URI.
A string which indirectly specifies the absolute URI with respect to which a relative URI in the "uri" property is interpreted.
An array of locations of files containing arrays of run.invocation objects to be merged with the root log file.
Specifies the location of a file.
2 nested properties
A string containing a valid relative or absolute URI.
A string which indirectly specifies the absolute URI with respect to which a relative URI in the "uri" property is interpreted.
Specifies the location of a file.
2 nested properties
A string containing a valid relative or absolute URI.
A string which indirectly specifies the absolute URI with respect to which a relative URI in the "uri" property is interpreted.
An array of locations of files containing arrays of run.result objects to be merged with the root log file.
A single file. In some cases, this file might be nested within another file.
Specifies the location of a file.
2 nested properties
A string containing a valid relative or absolute URI.
A string which indirectly specifies the absolute URI with respect to which a relative URI in the "uri" property is interpreted.
Identifies the key of the immediate parent of the file, if this file is nested.
The offset in bytes of the file within its containing file.
The length of the file in bytes.
The role or roles played by the file in the analysis.
The MIME type (RFC 2045) of the file.
Represents content from an external file.
2 nested properties
UTF-8-encoded content from a text file.
MIME Base64-encoded content from a binary file, or from a text file in its original encoding.
Specifies the encoding for a file object that refers to a text file.
An array of hash objects, each of which specifies a hashed value for the file, along with the name of the hash function used to compute the hash.
The date and time at which the file was most recently modified. See "Date/time properties" in the SARIF spec for the required format.
Key/value pairs that provide additional information about the file.
1 nested properties
A set of distinct strings that provide additional information.
[]A change to a single file.
Specifies the location of a file.
2 nested properties
A string containing a valid relative or absolute URI.
A string which indirectly specifies the absolute URI with respect to which a relative URI in the "uri" property is interpreted.
An array of replacement objects, each of which represents the replacement of a single region in a single file specified by 'fileLocation'.
Represents content from an external file.
UTF-8-encoded content from a text file.
MIME Base64-encoded content from a binary file, or from a text file in its original encoding.
Specifies the location of a file.
A string containing a valid relative or absolute URI.
A string which indirectly specifies the absolute URI with respect to which a relative URI in the "uri" property is interpreted.
A proposed fix for the problem represented by a result object. A fix specifies a set of file to modify. For each file, it specifies a set of bytes to remove, and provides a set of new bytes to replace them.
One or more file changes that comprise a fix for a result.
Encapsulates a message intended to be read by the end user.
5 nested properties
A plain text message string.
The resource id for a plain text message string.
A rich text message string.
The resource id for a rich text message string.
An array of strings to substitute into the message string.
A network of nodes and directed edges that describes some aspect of the structure of the code (for example, a call graph).
A string that uniquely identifies the graph within a run.graphs or result.graphs array.
An array of node objects representing the nodes of the graph.
An array of edge objects representing the edges of the graph.
Encapsulates a message intended to be read by the end user.
5 nested properties
A plain text message string.
The resource id for a plain text message string.
A rich text message string.
The resource id for a rich text message string.
An array of strings to substitute into the message string.
Key/value pairs that provide additional information about the graph.
1 nested properties
A set of distinct strings that provide additional information.
[]Represents a path through a graph.
A string that uniquely identifies that graph being traversed.
The sequences of edges traversed by this graph traversal.
Encapsulates a message intended to be read by the end user.
5 nested properties
A plain text message string.
The resource id for a plain text message string.
A rich text message string.
The resource id for a rich text message string.
An array of strings to substitute into the message string.
Values of relevant expressions at the start of the graph traversal.
Key/value pairs that provide additional information about the graph traversal.
1 nested properties
A set of distinct strings that provide additional information.
[]A hash value of some file or collection of files, together with the hash function used to compute the hash.
The hash value of some file or collection of files, computed by the hash function named in the 'algorithm' property.
The name of the hash function used to compute the hash value specified in the 'value' property.
The runtime environment of the analysis tool run.
The command line used to invoke the tool.
An array of strings, containing in order the command line arguments passed to the tool from the operating system.
The locations of any response files specified on the tool's command line.
A set of files relevant to the invocation of the tool.
The date and time at which the run started. See "Date/time properties" in the SARIF spec for the required format.
The date and time at which the run ended. See "Date/time properties" in the SARIF spec for the required format.
The process exit code.
A list of runtime conditions detected by the tool during the analysis.
A list of conditions detected by the tool that are relevant to the tool's configuration.
The reason for the process exit.
The name of the signal that caused the process to exit.
The numeric value of the signal that caused the process to exit.
The reason given by the operating system that the process failed to start.
A value indicating whether the tool's execution completed successfully.
The machine that hosted the analysis tool run.
The account that ran the analysis tool.
The process id for the analysis tool run.
Specifies the location of a file.
2 nested properties
A string containing a valid relative or absolute URI.
A string which indirectly specifies the absolute URI with respect to which a relative URI in the "uri" property is interpreted.
Specifies the location of a file.
2 nested properties
A string containing a valid relative or absolute URI.
A string which indirectly specifies the absolute URI with respect to which a relative URI in the "uri" property is interpreted.
The environment variables associated with the analysis tool process, expressed as key/value pairs.
{}Specifies the location of a file.
2 nested properties
A string containing a valid relative or absolute URI.
A string which indirectly specifies the absolute URI with respect to which a relative URI in the "uri" property is interpreted.
Specifies the location of a file.
2 nested properties
A string containing a valid relative or absolute URI.
A string which indirectly specifies the absolute URI with respect to which a relative URI in the "uri" property is interpreted.
Specifies the location of a file.
2 nested properties
A string containing a valid relative or absolute URI.
A string which indirectly specifies the absolute URI with respect to which a relative URI in the "uri" property is interpreted.
Specifies the location of a file.
2 nested properties
A string containing a valid relative or absolute URI.
A string which indirectly specifies the absolute URI with respect to which a relative URI in the "uri" property is interpreted.
Key/value pairs that provide additional information about the invocation.
1 nested properties
A set of distinct strings that provide additional information.
[]A location within a programming artifact.
A physical location relevant to a result. Specifies a reference to a programming artifact together with a range of bytes or characters within that artifact.
4 nested properties
Specifies the location of a file.
2 nested properties
A string containing a valid relative or absolute URI.
A string which indirectly specifies the absolute URI with respect to which a relative URI in the "uri" property is interpreted.
Value that distinguishes this physical location from all other physical locations in this run object.
A region within a file where a result was detected.
10 nested properties
The line number of the first character in the region.
The column number of the first character in the region.
The line number of the last character in the region.
The column number of the character following the end of the region.
The zero-based offset from the beginning of the file of the first character in the region.
The length of the region in characters.
The zero-based offset from the beginning of the file of the first byte in the region.
The length of the region in bytes.
Represents content from an external file.
Encapsulates a message intended to be read by the end user.
A region within a file where a result was detected.
10 nested properties
The line number of the first character in the region.
The column number of the first character in the region.
The line number of the last character in the region.
The column number of the character following the end of the region.
The zero-based offset from the beginning of the file of the first character in the region.
The length of the region in characters.
The zero-based offset from the beginning of the file of the first byte in the region.
The length of the region in bytes.
Represents content from an external file.
Encapsulates a message intended to be read by the end user.
The human-readable fully qualified name of the logical location. If run.logicalLocations is present, this value matches a property name within that object, from which further information about the logical location can be obtained.
Encapsulates a message intended to be read by the end user.
5 nested properties
A plain text message string.
The resource id for a plain text message string.
A rich text message string.
The resource id for a rich text message string.
An array of strings to substitute into the message string.
Key/value pairs that provide additional information about the location.
1 nested properties
A set of distinct strings that provide additional information.
[]A logical location of a construct that produced a result.
Identifies the construct in which the result occurred. For example, this property might contain the name of a class or a method.
The human-readable fully qualified name of the logical location.
The machine-readable name for the logical location, such as a mangled function name provided by a C++ compiler that encodes calling convention, return type and other details along with the function name.
Identifies the key of the immediate parent of the construct in which the result was detected. For example, this property might point to a logical location that represents the namespace that holds a type.
The type of construct this logicalLocationComponent refers to. Should be one of 'function', 'member', 'module', 'namespace', 'package', 'parameter', 'resource', 'returnType', 'type', or 'variable', if any of those accurately describe the construct.
Encapsulates a message intended to be read by the end user.
A plain text message string.
The resource id for a plain text message string.
A rich text message string.
The resource id for a rich text message string.
An array of strings to substitute into the message string.
Represents a node in a graph.
A string that uniquely identifies the node within its graph.
Encapsulates a message intended to be read by the end user.
5 nested properties
A plain text message string.
The resource id for a plain text message string.
A rich text message string.
The resource id for a rich text message string.
An array of strings to substitute into the message string.
A location within a programming artifact.
5 nested properties
A physical location relevant to a result. Specifies a reference to a programming artifact together with a range of bytes or characters within that artifact.
4 nested properties
The human-readable fully qualified name of the logical location. If run.logicalLocations is present, this value matches a property name within that object, from which further information about the logical location can be obtained.
Encapsulates a message intended to be read by the end user.
5 nested properties
A plain text message string.
The resource id for a plain text message string.
A rich text message string.
The resource id for a rich text message string.
An array of strings to substitute into the message string.
Key/value pairs that provide additional information about the location.
1 nested properties
A set of distinct strings that provide additional information.
[]Key/value pairs that provide additional information about the node.
1 nested properties
A set of distinct strings that provide additional information.
[]Describes a condition relevant to the tool itself, as opposed to being relevant to a target being analyzed by the tool.
Encapsulates a message intended to be read by the end user.
5 nested properties
A plain text message string.
The resource id for a plain text message string.
A rich text message string.
The resource id for a rich text message string.
An array of strings to substitute into the message string.
An identifier for the condition that was encountered.
The stable, unique identifier of the rule (if any) to which this notification is relevant. This member can be used to retrieve rule metadata from the rules dictionary, if it exists.
A physical location relevant to a result. Specifies a reference to a programming artifact together with a range of bytes or characters within that artifact.
4 nested properties
Specifies the location of a file.
2 nested properties
A string containing a valid relative or absolute URI.
A string which indirectly specifies the absolute URI with respect to which a relative URI in the "uri" property is interpreted.
Value that distinguishes this physical location from all other physical locations in this run object.
A region within a file where a result was detected.
10 nested properties
The line number of the first character in the region.
The column number of the first character in the region.
The line number of the last character in the region.
The column number of the character following the end of the region.
The zero-based offset from the beginning of the file of the first character in the region.
The length of the region in characters.
The zero-based offset from the beginning of the file of the first byte in the region.
The length of the region in bytes.
Represents content from an external file.
Encapsulates a message intended to be read by the end user.
A region within a file where a result was detected.
10 nested properties
The line number of the first character in the region.
The column number of the first character in the region.
The line number of the last character in the region.
The column number of the character following the end of the region.
The zero-based offset from the beginning of the file of the first character in the region.
The length of the region in characters.
The zero-based offset from the beginning of the file of the first byte in the region.
The length of the region in bytes.
Represents content from an external file.
Encapsulates a message intended to be read by the end user.
A value specifying the severity level of the notification.
The thread identifier of the code that generated the notification.
The date and time at which the analysis tool generated the notification.
4 nested properties
A string that identifies the kind of exception, for example, the fully qualified type name of an object that was thrown, or the symbolic name of a signal.
A plain text message that describes the exception.
A call stack that is relevant to a result.
3 nested properties
An array of stack frames that represent a sequence of calls, rendered in reverse chronological order, that comprise the call stack.
Encapsulates a message intended to be read by the end user.
Key/value pairs that provide additional information about the stack.
An array of exception objects each of which is considered a cause of this exception.
Key/value pairs that provide additional information about the notification.
1 nested properties
A set of distinct strings that provide additional information.
[]A physical location relevant to a result. Specifies a reference to a programming artifact together with a range of bytes or characters within that artifact.
Specifies the location of a file.
2 nested properties
A string containing a valid relative or absolute URI.
A string which indirectly specifies the absolute URI with respect to which a relative URI in the "uri" property is interpreted.
Value that distinguishes this physical location from all other physical locations in this run object.
A region within a file where a result was detected.
10 nested properties
The line number of the first character in the region.
The column number of the first character in the region.
The line number of the last character in the region.
The column number of the character following the end of the region.
The zero-based offset from the beginning of the file of the first character in the region.
The length of the region in characters.
The zero-based offset from the beginning of the file of the first byte in the region.
The length of the region in bytes.
Represents content from an external file.
2 nested properties
UTF-8-encoded content from a text file.
MIME Base64-encoded content from a binary file, or from a text file in its original encoding.
Encapsulates a message intended to be read by the end user.
5 nested properties
A plain text message string.
The resource id for a plain text message string.
A rich text message string.
The resource id for a rich text message string.
An array of strings to substitute into the message string.
A region within a file where a result was detected.
10 nested properties
The line number of the first character in the region.
The column number of the first character in the region.
The line number of the last character in the region.
The column number of the character following the end of the region.
The zero-based offset from the beginning of the file of the first character in the region.
The length of the region in characters.
The zero-based offset from the beginning of the file of the first byte in the region.
The length of the region in bytes.
Represents content from an external file.
2 nested properties
UTF-8-encoded content from a text file.
MIME Base64-encoded content from a binary file, or from a text file in its original encoding.
Encapsulates a message intended to be read by the end user.
5 nested properties
A plain text message string.
The resource id for a plain text message string.
A rich text message string.
The resource id for a rich text message string.
An array of strings to substitute into the message string.
An area within an image.
The Y coordinate of the top edge of the rectangle, measured in the image's natural units.
The X coordinate of the left edge of the rectangle, measured in the image's natural units.
The Y coordinate of the bottom edge of the rectangle, measured in the image's natural units.
The X coordinate of the right edge of the rectangle, measured in the image's natural units.
Encapsulates a message intended to be read by the end user.
5 nested properties
A plain text message string.
The resource id for a plain text message string.
A rich text message string.
The resource id for a rich text message string.
An array of strings to substitute into the message string.
A region within a file where a result was detected.
The line number of the first character in the region.
The column number of the first character in the region.
The line number of the last character in the region.
The column number of the character following the end of the region.
The zero-based offset from the beginning of the file of the first character in the region.
The length of the region in characters.
The zero-based offset from the beginning of the file of the first byte in the region.
The length of the region in bytes.
Represents content from an external file.
2 nested properties
UTF-8-encoded content from a text file.
MIME Base64-encoded content from a binary file, or from a text file in its original encoding.
Encapsulates a message intended to be read by the end user.
5 nested properties
A plain text message string.
The resource id for a plain text message string.
A rich text message string.
The resource id for a rich text message string.
An array of strings to substitute into the message string.
The replacement of a single region of a file.
A region within a file where a result was detected.
10 nested properties
The line number of the first character in the region.
The column number of the first character in the region.
The line number of the last character in the region.
The column number of the character following the end of the region.
The zero-based offset from the beginning of the file of the first character in the region.
The length of the region in characters.
The zero-based offset from the beginning of the file of the first byte in the region.
The length of the region in bytes.
Represents content from an external file.
2 nested properties
UTF-8-encoded content from a text file.
MIME Base64-encoded content from a binary file, or from a text file in its original encoding.
Encapsulates a message intended to be read by the end user.
5 nested properties
A plain text message string.
The resource id for a plain text message string.
A rich text message string.
The resource id for a rich text message string.
An array of strings to substitute into the message string.
Represents content from an external file.
2 nested properties
UTF-8-encoded content from a text file.
MIME Base64-encoded content from a binary file, or from a text file in its original encoding.
Container for items that require localization.
A dictionary, each of whose keys is a resource identifier and each of whose values is a localized string.
A dictionary, each of whose keys is a string and each of whose values is a 'rule' object, that describe all rules associated with an analysis tool or a specific run of an analysis tool.
A result produced by an analysis tool.
The stable, unique identifier of the rule (if any) to which this notification is relevant. This member can be used to retrieve rule metadata from the rules dictionary, if it exists.
A value specifying the severity level of the result.
Encapsulates a message intended to be read by the end user.
5 nested properties
A plain text message string.
The resource id for a plain text message string.
A rich text message string.
The resource id for a rich text message string.
An array of strings to substitute into the message string.
Specifies the location of a file.
2 nested properties
A string containing a valid relative or absolute URI.
A string which indirectly specifies the absolute URI with respect to which a relative URI in the "uri" property is interpreted.
One or more locations where the result occurred. Specify only one location unless the problem indicated by the result can only be corrected by making a change at every specified location.
A stable, unique identifier for the result in the form of a GUID.
A stable, unique identifier for the equivalence class of logically identical results to which this result belongs, in the form of a GUID.
A set of strings that contribute to the stable, unique identity of the result.
A set of strings each of which individually defines a stable, unique identity for the result.
An array of 'codeFlow' objects relevant to the result.
An array of one or more unique 'graphTraversal' objects.
A set of flags indicating one or more suppression conditions.
The state of a result relative to a baseline of a previous run.
The URIs of the work items associated with this result
An array of physicalLocation objects which specify the portions of an analysis tool's output that a converter transformed into the result object.
An array of 'fix' objects, each of which represents a proposed fix to the problem indicated by the result.
Key/value pairs that provide additional information about the result.
1 nested properties
A set of distinct strings that provide additional information.
[]Describes an analysis rule.
A stable, opaque identifier for the rule.
Encapsulates a message intended to be read by the end user.
5 nested properties
A plain text message string.
The resource id for a plain text message string.
A rich text message string.
The resource id for a rich text message string.
An array of strings to substitute into the message string.
Encapsulates a message intended to be read by the end user.
5 nested properties
A plain text message string.
The resource id for a plain text message string.
A rich text message string.
The resource id for a rich text message string.
An array of strings to substitute into the message string.
Encapsulates a message intended to be read by the end user.
5 nested properties
A plain text message string.
The resource id for a plain text message string.
A rich text message string.
The resource id for a rich text message string.
An array of strings to substitute into the message string.
A set of name/value pairs with arbitrary names. The value within each name/value pair consists of plain text interspersed with placeholders, which can be used to construct a message in combination with an arbitrary number of additional string arguments.
A set of name/value pairs with arbitrary names. The value within each name/value pair consists of rich text interspersed with placeholders, which can be used to construct a message in combination with an arbitrary number of additional string arguments.
Information about a rule that can be configured at runtime.
3 nested properties
Specifies whether the rule will be evaluated during the scan.
Specifies the default severity level of the result.
Contains configuration information specific to this rule.
1 nested properties
A set of distinct strings that provide additional configuration information.
[]A URI where the primary documentation for the rule can be found.
Encapsulates a message intended to be read by the end user.
5 nested properties
A plain text message string.
The resource id for a plain text message string.
A rich text message string.
The resource id for a rich text message string.
An array of strings to substitute into the message string.
Key/value pairs that provide additional information about the rule.
1 nested properties
A set of distinct strings that provide additional information.
[]Information about a rule that can be configured at runtime.
Specifies whether the rule will be evaluated during the scan.
Specifies the default severity level of the result.
Contains configuration information specific to this rule.
1 nested properties
A set of distinct strings that provide additional configuration information.
[]Describes a single run of an analysis tool, and contains the output of that run.
The analysis tool that was run.
9 nested properties
The name of the tool.
The name of the tool along with its version and any other useful identifying information, such as its locale.
The tool version, in whatever format the tool natively provides.
The tool version in the format specified by Semantic Versioning 2.0.
The binary version of the tool's primary executable file (for operating systems such as Windows that provide that information).
The absolute URI from which the tool can be downloaded.
A version that uniquely identifies the SARIF logging component that generated this file, if it is versioned separately from the tool.
The tool language (expressed as an ISO 649 two-letter lowercase culture code) and region (expressed as an ISO 3166 two-letter uppercase subculture code associated with a country or region).
Key/value pairs that provide additional information about the tool.
1 nested properties
A set of distinct strings that provide additional information.
[]Describes how a converter transformed the output of a static analysis tool from the analysis tool's native output format into the SARIF format.
3 nested properties
The analysis tool that was run.
9 nested properties
The name of the tool.
The name of the tool along with its version and any other useful identifying information, such as its locale.
The tool version, in whatever format the tool natively provides.
The tool version in the format specified by Semantic Versioning 2.0.
The binary version of the tool's primary executable file (for operating systems such as Windows that provide that information).
The absolute URI from which the tool can be downloaded.
A version that uniquely identifies the SARIF logging component that generated this file, if it is versioned separately from the tool.
The tool language (expressed as an ISO 649 two-letter lowercase culture code) and region (expressed as an ISO 3166 two-letter uppercase subculture code associated with a country or region).
Key/value pairs that provide additional information about the tool.
The runtime environment of the analysis tool run.
25 nested properties
The command line used to invoke the tool.
An array of strings, containing in order the command line arguments passed to the tool from the operating system.
The locations of any response files specified on the tool's command line.
A set of files relevant to the invocation of the tool.
The date and time at which the run started. See "Date/time properties" in the SARIF spec for the required format.
The date and time at which the run ended. See "Date/time properties" in the SARIF spec for the required format.
The process exit code.
A list of runtime conditions detected by the tool during the analysis.
A list of conditions detected by the tool that are relevant to the tool's configuration.
The reason for the process exit.
The name of the signal that caused the process to exit.
The numeric value of the signal that caused the process to exit.
The reason given by the operating system that the process failed to start.
A value indicating whether the tool's execution completed successfully.
The machine that hosted the analysis tool run.
The account that ran the analysis tool.
The process id for the analysis tool run.
Specifies the location of a file.
Specifies the location of a file.
The environment variables associated with the analysis tool process, expressed as key/value pairs.
{}Specifies the location of a file.
Specifies the location of a file.
Specifies the location of a file.
Specifies the location of a file.
Key/value pairs that provide additional information about the invocation.
The locations of the analysis tool's per-run log files.
Specifies the revision in version control of the files that were scanned.
The absolute URI specified by each uriBaseId symbol on the machine where the tool originally ran.
A dictionary, each of whose keys is a URI and each of whose values is a file object.
A dictionary, each of whose keys specifies a logical location such as a namespace, type or function.
The set of results contained in an SARIF log. The results array can be omitted when a run is solely exporting rules metadata. It must be present (but may be empty) if a log file represents an actual scan.
Container for items that require localization.
2 nested properties
A dictionary, each of whose keys is a resource identifier and each of whose values is a localized string.
A dictionary, each of whose keys is a string and each of whose values is a 'rule' object, that describe all rules associated with an analysis tool or a specific run of an analysis tool.
A stable, unique identifier for the run, in the form of a GUID.
A stable, unique identifier for the class of related runs to which this run belongs, in the form of a GUID.
A logical identifier for a run, for example, 'nightly Clang analyzer run'. Multiple runs of the same type can have the same logical id.
Encapsulates a message intended to be read by the end user.
5 nested properties
A plain text message string.
The resource id for a plain text message string.
A rich text message string.
The resource id for a rich text message string.
An array of strings to substitute into the message string.
A global identifier that allows the run to be correlated with other artifacts produced by a larger automation process.
The 'instanceGuid' property of a previous SARIF 'run' that comprises the baseline that was used to compute result 'baselineState' properties for the run.
The hardware architecture for which the run was targeted.
The MIME type of all rich text message properties in the run. Default: "text/markdown;variant=GFM"
The string used to replace sensitive information in a redaction-aware property.
Specifies the default encoding for any file object that refers to a text file.
Specifies the unit in which the tool measures columns.
Key/value pairs that provide additional information about the run.
1 nested properties
A set of distinct strings that provide additional information about the run.
[]A call stack that is relevant to a result.
An array of stack frames that represent a sequence of calls, rendered in reverse chronological order, that comprise the call stack.
Encapsulates a message intended to be read by the end user.
5 nested properties
A plain text message string.
The resource id for a plain text message string.
A rich text message string.
The resource id for a rich text message string.
An array of strings to substitute into the message string.
Key/value pairs that provide additional information about the stack.
1 nested properties
A set of distinct strings that provide additional information.
[]A function call within a stack trace.
A location within a programming artifact.
5 nested properties
A physical location relevant to a result. Specifies a reference to a programming artifact together with a range of bytes or characters within that artifact.
4 nested properties
The human-readable fully qualified name of the logical location. If run.logicalLocations is present, this value matches a property name within that object, from which further information about the logical location can be obtained.
Encapsulates a message intended to be read by the end user.
5 nested properties
A plain text message string.
The resource id for a plain text message string.
A rich text message string.
The resource id for a rich text message string.
An array of strings to substitute into the message string.
Key/value pairs that provide additional information about the location.
1 nested properties
A set of distinct strings that provide additional information.
[]The name of the module that contains the code of this stack frame.
The thread identifier of the stack frame.
The address of the method or function that is executing.
The offset from the method or function that is executing.
The parameters of the call that is executing.
Key/value pairs that provide additional information about the stack frame.
1 nested properties
A set of distinct strings that provide additional information.
[]A temporally ordered array of 'threadFlowLocation' objects, each of which describes a location visited by the tool while producing the result.
An string that uniquely identifies the threadFlow within the codeFlow in which it occurs.
Encapsulates a message intended to be read by the end user.
5 nested properties
A plain text message string.
The resource id for a plain text message string.
A rich text message string.
The resource id for a rich text message string.
An array of strings to substitute into the message string.
Key/value pairs that provide additional information about the thread flow.
1 nested properties
A set of distinct strings that provide additional information.
[]A location visited by an analysis tool while simulating or monitoring the execution of a program.
The 0-based sequence number of the location in the code flow within which it occurs.
A location within a programming artifact.
5 nested properties
A physical location relevant to a result. Specifies a reference to a programming artifact together with a range of bytes or characters within that artifact.
4 nested properties
The human-readable fully qualified name of the logical location. If run.logicalLocations is present, this value matches a property name within that object, from which further information about the logical location can be obtained.
Encapsulates a message intended to be read by the end user.
5 nested properties
A plain text message string.
The resource id for a plain text message string.
A rich text message string.
The resource id for a rich text message string.
An array of strings to substitute into the message string.
Key/value pairs that provide additional information about the location.
1 nested properties
A set of distinct strings that provide additional information.
[]A call stack that is relevant to a result.
3 nested properties
An array of stack frames that represent a sequence of calls, rendered in reverse chronological order, that comprise the call stack.
Encapsulates a message intended to be read by the end user.
5 nested properties
A plain text message string.
The resource id for a plain text message string.
A rich text message string.
The resource id for a rich text message string.
An array of strings to substitute into the message string.
Key/value pairs that provide additional information about the stack.
1 nested properties
A set of distinct strings that provide additional information.
[]A string describing the type of this location.
The name of the module that contains the code that is executing.
A dictionary, each of whose keys specifies a variable or expression, the associated value of which represents the variable or expression value. For an annotation of kind 'continuation', for example, this dictionary might hold the current assumed values of a set of global variables.
An integer representing a containment hierarchy within the thread flow
An integer representing the temporal order in which execution reached this location.
The time at which this location was executed.
Specifies the importance of this location in understanding the code flow in which it occurs. The order from most to least important is "essential", "important", "unimportant". Default: "important".
Key/value pairs that provide additional information about the code location.
1 nested properties
A set of distinct strings that provide additional information.
[]The analysis tool that was run.
The name of the tool.
The name of the tool along with its version and any other useful identifying information, such as its locale.
The tool version, in whatever format the tool natively provides.
The tool version in the format specified by Semantic Versioning 2.0.
The binary version of the tool's primary executable file (for operating systems such as Windows that provide that information).
The absolute URI from which the tool can be downloaded.
A version that uniquely identifies the SARIF logging component that generated this file, if it is versioned separately from the tool.
The tool language (expressed as an ISO 649 two-letter lowercase culture code) and region (expressed as an ISO 3166 two-letter uppercase subculture code associated with a country or region).
Key/value pairs that provide additional information about the tool.
1 nested properties
A set of distinct strings that provide additional information.
[]Specifies the information necessary to retrieve a desired revision from a version control system.
The absolute URI of the repository.
A string that uniquely and permanently identifies the revision within the repository.
The name of a branch containing the revision.
A tag that has been applied to the revision.
The date and time at which the revision was created.
Key/value pairs that provide additional information about the revision.
1 nested properties
A set of distinct strings that provide additional information.
[]