latest--sarif-2.1.0-rtm.3
sharedStatic Analysis Results Format (SARIF) Version 2.1.0-rtm.3 JSON Schema: a standard format for the output of static analysis tools.
Properties
The SARIF format version of this log file.
The URI of the JSON schema corresponding to the version.
References to external property files that share data between runs.
Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]Definitions
A physical or virtual address, or a range of addresses, in an 'addressable region' (memory or a binary file).
The address expressed as a byte offset from the start of the addressable region.
The address expressed as a byte offset from the absolute address of the top-most parent object.
The number of bytes in this range of addresses.
An open-ended string that identifies the address kind. 'data', 'function', 'header','instruction', 'module', 'page', 'section', 'segment', 'stack', 'stackFrame', 'table' are well-known values.
A name that is associated with the address, e.g., '.text'.
A human-readable fully qualified name that is associated with the address.
The byte offset of this address from the absolute or relative address of the parent object.
The index within run.addresses of the cached object for this address.
The index within run.addresses of the parent object.
Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]A single artifact. In some cases, this artifact might be nested within another artifact.
Encapsulates a message intended to be read by the end user.
5 nested properties
A plain text message string.
A Markdown message string.
The identifier for this message.
An array of strings to substitute into the message string.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]Specifies the location of an artifact.
5 nested properties
A string containing a valid relative or absolute URI.
A string which indirectly specifies the absolute URI with respect to which a relative URI in the "uri" property is interpreted.
The index within the run artifacts array of the artifact object associated with the artifact location.
Encapsulates a message intended to be read by the end user.
5 nested properties
A plain text message string.
A Markdown message string.
The identifier for this message.
An array of strings to substitute into the message string.
[]Key/value pairs that provide additional information about the object.
Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]Identifies the index of the immediate parent of the artifact, if this artifact is nested.
The offset in bytes of the artifact within its containing artifact.
The length of the artifact in bytes.
The role or roles played by the artifact in the analysis.
[]The MIME type (RFC 2045) of the artifact.
Represents the contents of an artifact.
4 nested properties
UTF-8-encoded content from a text artifact.
MIME Base64-encoded content from a binary artifact, or from a text artifact in its original encoding.
A message string or message format string rendered in multiple formats.
3 nested properties
A plain text message string or format string.
A Markdown message string or format string.
Key/value pairs that provide additional information about the object.
Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]Specifies the encoding for an artifact object that refers to a text file.
Specifies the source language for any artifact object that refers to a text file that contains source code.
A dictionary, each of whose keys is the name of a hash function and each of whose values is the hashed value of the artifact produced by the specified hash function.
The Coordinated Universal Time (UTC) date and time at which the artifact was most recently modified. See "Date/time properties" in the SARIF spec for the required format.
Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]A change to a single artifact.
Specifies the location of an artifact.
5 nested properties
A string containing a valid relative or absolute URI.
A string which indirectly specifies the absolute URI with respect to which a relative URI in the "uri" property is interpreted.
The index within the run artifacts array of the artifact object associated with the artifact location.
Encapsulates a message intended to be read by the end user.
5 nested properties
A plain text message string.
A Markdown message string.
The identifier for this message.
An array of strings to substitute into the message string.
[]Key/value pairs that provide additional information about the object.
Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]An array of replacement objects, each of which represents the replacement of a single region in a single artifact specified by 'artifactLocation'.
Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]Represents the contents of an artifact.
UTF-8-encoded content from a text artifact.
MIME Base64-encoded content from a binary artifact, or from a text artifact in its original encoding.
A message string or message format string rendered in multiple formats.
3 nested properties
A plain text message string or format string.
A Markdown message string or format string.
Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]Specifies the location of an artifact.
A string containing a valid relative or absolute URI.
A string which indirectly specifies the absolute URI with respect to which a relative URI in the "uri" property is interpreted.
The index within the run artifacts array of the artifact object associated with the artifact location.
Encapsulates a message intended to be read by the end user.
5 nested properties
A plain text message string.
A Markdown message string.
The identifier for this message.
An array of strings to substitute into the message string.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]An artifact relevant to a result.
Specifies the location of an artifact.
5 nested properties
A string containing a valid relative or absolute URI.
A string which indirectly specifies the absolute URI with respect to which a relative URI in the "uri" property is interpreted.
The index within the run artifacts array of the artifact object associated with the artifact location.
Encapsulates a message intended to be read by the end user.
5 nested properties
A plain text message string.
A Markdown message string.
The identifier for this message.
An array of strings to substitute into the message string.
[]Key/value pairs that provide additional information about the object.
Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]Encapsulates a message intended to be read by the end user.
5 nested properties
A plain text message string.
A Markdown message string.
The identifier for this message.
An array of strings to substitute into the message string.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]An array of regions of interest within the attachment.
[]An array of rectangles specifying areas of interest within the image.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]A set of threadFlows which together describe a pattern of code execution relevant to detecting a result.
An array of one or more unique threadFlow objects, each of which describes the progress of a program through a thread of execution.
Encapsulates a message intended to be read by the end user.
5 nested properties
A plain text message string.
A Markdown message string.
The identifier for this message.
An array of strings to substitute into the message string.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]Information about how a specific rule or notification was reconfigured at runtime.
Information about a rule or notification that can be configured at runtime.
5 nested properties
Specifies whether the report may be produced during the scan.
Specifies the failure level for the report.
Specifies the relative priority of the report. Used for analysis output only.
Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]Information about how to locate a relevant reporting descriptor.
5 nested properties
The id of the descriptor.
The index into an array of descriptors in toolComponent.ruleDescriptors, toolComponent.notificationDescriptors, or toolComponent.taxonomyDescriptors, depending on context.
A guid that uniquely identifies the descriptor.
4 nested properties
The 'name' property of the referenced toolComponent.
An index into the referenced toolComponent in tool.extensions.
The 'guid' property of the referenced toolComponent.
Key/value pairs that provide additional information about the object.
Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]Describes how a converter transformed the output of a static analysis tool from the analysis tool's native output format into the SARIF format.
The analysis tool that was run.
3 nested properties
A component, such as a plug-in or the driver, of the analysis tool that was run.
28 nested properties
The name of the tool component.
A unique identifier for the tool component in the form of a GUID.
The organization or company that produced the tool component.
A product suite to which the tool component belongs.
A localizable string containing the name of the suite of products to which the tool component belongs.
A message string or message format string rendered in multiple formats.
A message string or message format string rendered in multiple formats.
The name of the tool component along with its version and any other useful identifying information, such as its locale.
The tool component version, in whatever format the component natively provides.
The tool component version in the format specified by Semantic Versioning 2.0.
The binary version of the tool component's primary executable file expressed as four non-negative integers separated by a period (for operating systems that express file versions in this way).
A string specifying the UTC date (and optionally, the time) of the component's release.
The absolute URI from which the tool component can be downloaded.
The absolute URI at which information about this version of the tool component can be found.
A dictionary, each of whose keys is a resource identifier and each of whose values is a multiformatMessageString object, which holds message strings in plain text and (optionally) Markdown format. The strings can include placeholders, which can be used to construct a message in combination with an arbitrary number of additional string arguments.
An array of reportingDescriptor objects relevant to the notifications related to the configuration and runtime execution of the tool component.
[]An array of reportingDescriptor objects relevant to the analysis performed by the tool component.
[]An array of reportingDescriptor objects relevant to the definitions of both standalone and tool-defined taxonomies.
[]An array of the artifactLocation objects associated with the tool component.
[]The language of the messages emitted into the log file during this run (expressed as an ISO 639-1 two-letter lowercase language code) and an optional region (expressed as an ISO 3166-1 two-letter uppercase subculture code associated with a country or region). The casing is recommended but not required (in order for this data to conform to RFC5646).
The kinds of data contained in this object.
[
"localizedData",
"nonLocalizedData"
]Specifies whether this object contains a complete definition of the localizable and/or non-localizable data for this component, as opposed to including only data that is relevant to the results persisted to this log file.
The semantic version of the localized strings defined in this component; maintained by components that provide translations.
The minimum value of localizedDataSemanticVersion required in translations consumed by this component; used by components that consume translations.
Provides additional metadata related to translation.
An array of toolComponentReference objects to declare the taxonomies supported by the tool component.
[]Key/value pairs that provide additional information about the object.
Tool extensions that contributed to or reconfigured the analysis tool that was run.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]The runtime environment of the analysis tool run.
26 nested properties
Specifies whether the tool's execution completed successfully.
The command line used to invoke the tool.
An array of strings, containing in order the command line arguments passed to the tool from the operating system.
The locations of any response files specified on the tool's command line.
The Coordinated Universal Time (UTC) date and time at which the run started. See "Date/time properties" in the SARIF spec for the required format.
The Coordinated Universal Time (UTC) date and time at which the run ended. See "Date/time properties" in the SARIF spec for the required format.
The process exit code.
An array of configurationOverride objects that describe rules related runtime overrides.
[]An array of configurationOverride objects that describe notifications related runtime overrides.
[]A list of runtime conditions detected by the tool during the analysis.
[]A list of conditions detected by the tool that are relevant to the tool's configuration.
[]The reason for the process exit.
The name of the signal that caused the process to exit.
The numeric value of the signal that caused the process to exit.
The reason given by the operating system that the process failed to start.
The machine that hosted the analysis tool run.
The account that ran the analysis tool.
The process id for the analysis tool run.
Specifies the location of an artifact.
5 nested properties
A string containing a valid relative or absolute URI.
A string which indirectly specifies the absolute URI with respect to which a relative URI in the "uri" property is interpreted.
The index within the run artifacts array of the artifact object associated with the artifact location.
Key/value pairs that provide additional information about the object.
Specifies the location of an artifact.
5 nested properties
A string containing a valid relative or absolute URI.
A string which indirectly specifies the absolute URI with respect to which a relative URI in the "uri" property is interpreted.
The index within the run artifacts array of the artifact object associated with the artifact location.
Key/value pairs that provide additional information about the object.
The environment variables associated with the analysis tool process, expressed as key/value pairs.
Specifies the location of an artifact.
5 nested properties
A string containing a valid relative or absolute URI.
A string which indirectly specifies the absolute URI with respect to which a relative URI in the "uri" property is interpreted.
The index within the run artifacts array of the artifact object associated with the artifact location.
Key/value pairs that provide additional information about the object.
Specifies the location of an artifact.
5 nested properties
A string containing a valid relative or absolute URI.
A string which indirectly specifies the absolute URI with respect to which a relative URI in the "uri" property is interpreted.
The index within the run artifacts array of the artifact object associated with the artifact location.
Key/value pairs that provide additional information about the object.
Specifies the location of an artifact.
5 nested properties
A string containing a valid relative or absolute URI.
A string which indirectly specifies the absolute URI with respect to which a relative URI in the "uri" property is interpreted.
The index within the run artifacts array of the artifact object associated with the artifact location.
Key/value pairs that provide additional information about the object.
Specifies the location of an artifact.
5 nested properties
A string containing a valid relative or absolute URI.
A string which indirectly specifies the absolute URI with respect to which a relative URI in the "uri" property is interpreted.
The index within the run artifacts array of the artifact object associated with the artifact location.
Key/value pairs that provide additional information about the object.
Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]The locations of the analysis tool's per-run log files.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]Represents a directed edge in a graph.
A string that uniquely identifies the edge within its graph.
Identifies the source node (the node at which the edge starts).
Identifies the target node (the node at which the edge ends).
Encapsulates a message intended to be read by the end user.
5 nested properties
A plain text message string.
A Markdown message string.
The identifier for this message.
An array of strings to substitute into the message string.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]Represents the traversal of a single edge during a graph traversal.
Identifies the edge being traversed.
Encapsulates a message intended to be read by the end user.
5 nested properties
A plain text message string.
A Markdown message string.
The identifier for this message.
An array of strings to substitute into the message string.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]The values of relevant expressions after the edge has been traversed.
The number of edge traversals necessary to return from a nested graph.
Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]A string that identifies the kind of exception, for example, the fully qualified type name of an object that was thrown, or the symbolic name of a signal.
A message that describes the exception.
A call stack that is relevant to a result.
3 nested properties
An array of stack frames that represents a sequence of calls, rendered in reverse chronological order, that comprise the call stack.
Encapsulates a message intended to be read by the end user.
5 nested properties
A plain text message string.
A Markdown message string.
The identifier for this message.
An array of strings to substitute into the message string.
[]Key/value pairs that provide additional information about the object.
Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]An array of exception objects each of which is considered a cause of this exception.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]The URI of the JSON schema corresponding to the version of the external property file format.
The SARIF format version of this external properties object.
A stable, unique identifier for this external properties object, in the form of a GUID.
A stable, unique identifier for the run associated with this external properties object, in the form of a GUID.
Describes how a converter transformed the output of a static analysis tool from the analysis tool's native output format into the SARIF format.
4 nested properties
The analysis tool that was run.
3 nested properties
A component, such as a plug-in or the driver, of the analysis tool that was run.
Tool extensions that contributed to or reconfigured the analysis tool that was run.
[]Key/value pairs that provide additional information about the object.
The runtime environment of the analysis tool run.
26 nested properties
Specifies whether the tool's execution completed successfully.
The command line used to invoke the tool.
An array of strings, containing in order the command line arguments passed to the tool from the operating system.
The locations of any response files specified on the tool's command line.
The Coordinated Universal Time (UTC) date and time at which the run started. See "Date/time properties" in the SARIF spec for the required format.
The Coordinated Universal Time (UTC) date and time at which the run ended. See "Date/time properties" in the SARIF spec for the required format.
The process exit code.
An array of configurationOverride objects that describe rules related runtime overrides.
[]An array of configurationOverride objects that describe notifications related runtime overrides.
[]A list of runtime conditions detected by the tool during the analysis.
[]A list of conditions detected by the tool that are relevant to the tool's configuration.
[]The reason for the process exit.
The name of the signal that caused the process to exit.
The numeric value of the signal that caused the process to exit.
The reason given by the operating system that the process failed to start.
The machine that hosted the analysis tool run.
The account that ran the analysis tool.
The process id for the analysis tool run.
Specifies the location of an artifact.
Specifies the location of an artifact.
The environment variables associated with the analysis tool process, expressed as key/value pairs.
Specifies the location of an artifact.
Specifies the location of an artifact.
Specifies the location of an artifact.
Specifies the location of an artifact.
Key/value pairs that provide additional information about the object.
The locations of the analysis tool's per-run log files.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]An array of graph objects that will be merged with a separate run.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]An array of artifact objects that will be merged with a separate run.
Describes the invocation of the analysis tool that will be merged with a separate run.
[]An array of logical locations such as namespaces, types or functions that will be merged with a separate run.
[]An array of threadFlowLocation objects that will be merged with a separate run.
[]Tool taxonomies that will be merged with a separate run.
[]A component, such as a plug-in or the driver, of the analysis tool that was run.
28 nested properties
The name of the tool component.
A unique identifier for the tool component in the form of a GUID.
The organization or company that produced the tool component.
A product suite to which the tool component belongs.
A localizable string containing the name of the suite of products to which the tool component belongs.
A message string or message format string rendered in multiple formats.
3 nested properties
A plain text message string or format string.
A Markdown message string or format string.
Key/value pairs that provide additional information about the object.
A message string or message format string rendered in multiple formats.
3 nested properties
A plain text message string or format string.
A Markdown message string or format string.
Key/value pairs that provide additional information about the object.
The name of the tool component along with its version and any other useful identifying information, such as its locale.
The tool component version, in whatever format the component natively provides.
The tool component version in the format specified by Semantic Versioning 2.0.
The binary version of the tool component's primary executable file expressed as four non-negative integers separated by a period (for operating systems that express file versions in this way).
A string specifying the UTC date (and optionally, the time) of the component's release.
The absolute URI from which the tool component can be downloaded.
The absolute URI at which information about this version of the tool component can be found.
A dictionary, each of whose keys is a resource identifier and each of whose values is a multiformatMessageString object, which holds message strings in plain text and (optionally) Markdown format. The strings can include placeholders, which can be used to construct a message in combination with an arbitrary number of additional string arguments.
An array of reportingDescriptor objects relevant to the notifications related to the configuration and runtime execution of the tool component.
[]An array of reportingDescriptor objects relevant to the analysis performed by the tool component.
[]An array of reportingDescriptor objects relevant to the definitions of both standalone and tool-defined taxonomies.
[]An array of the artifactLocation objects associated with the tool component.
[]The language of the messages emitted into the log file during this run (expressed as an ISO 639-1 two-letter lowercase language code) and an optional region (expressed as an ISO 3166-1 two-letter uppercase subculture code associated with a country or region). The casing is recommended but not required (in order for this data to conform to RFC5646).
The kinds of data contained in this object.
[
"localizedData",
"nonLocalizedData"
]Specifies whether this object contains a complete definition of the localizable and/or non-localizable data for this component, as opposed to including only data that is relevant to the results persisted to this log file.
The semantic version of the localized strings defined in this component; maintained by components that provide translations.
The minimum value of localizedDataSemanticVersion required in translations consumed by this component; used by components that consume translations.
4 nested properties
The 'name' property of the referenced toolComponent.
An index into the referenced toolComponent in tool.extensions.
The 'guid' property of the referenced toolComponent.
Key/value pairs that provide additional information about the object.
Provides additional metadata related to translation.
7 nested properties
The name associated with the translation metadata.
The full name associated with the translation metadata.
A message string or message format string rendered in multiple formats.
A message string or message format string rendered in multiple formats.
The absolute URI from which the translation metadata can be downloaded.
The absolute URI from which information related to the translation metadata can be downloaded.
Key/value pairs that provide additional information about the object.
An array of toolComponentReference objects to declare the taxonomies supported by the tool component.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]Tool extensions that will be merged with a separate run.
[]Tool policies that will be merged with a separate run.
[]Tool translations that will be merged with a separate run.
[]Requests that will be merged with a separate run.
[]Responses that will be merged with a separate run.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]Specifies the location of an artifact.
5 nested properties
A string containing a valid relative or absolute URI.
A string which indirectly specifies the absolute URI with respect to which a relative URI in the "uri" property is interpreted.
The index within the run artifacts array of the artifact object associated with the artifact location.
Encapsulates a message intended to be read by the end user.
5 nested properties
A plain text message string.
A Markdown message string.
The identifier for this message.
An array of strings to substitute into the message string.
[]Key/value pairs that provide additional information about the object.
Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]A stable, unique identifier for the external property file in the form of a GUID.
A non-negative integer specifying the number of items contained in the external property file.
Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]References to external property files that should be inlined with the content of a root log file.
4 nested properties
Specifies the location of an artifact.
5 nested properties
A string containing a valid relative or absolute URI.
A string which indirectly specifies the absolute URI with respect to which a relative URI in the "uri" property is interpreted.
The index within the run artifacts array of the artifact object associated with the artifact location.
Key/value pairs that provide additional information about the object.
A stable, unique identifier for the external property file in the form of a GUID.
A non-negative integer specifying the number of items contained in the external property file.
Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]An array of external property files containing a run.graphs object to be merged with the root log file.
[]4 nested properties
Specifies the location of an artifact.
5 nested properties
A string containing a valid relative or absolute URI.
A string which indirectly specifies the absolute URI with respect to which a relative URI in the "uri" property is interpreted.
The index within the run artifacts array of the artifact object associated with the artifact location.
Key/value pairs that provide additional information about the object.
A stable, unique identifier for the external property file in the form of a GUID.
A non-negative integer specifying the number of items contained in the external property file.
Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]An array of external property files containing run.artifacts arrays to be merged with the root log file.
[]An array of external property files containing run.invocations arrays to be merged with the root log file.
[]An array of external property files containing run.logicalLocations arrays to be merged with the root log file.
[]An array of external property files containing run.threadFlowLocations arrays to be merged with the root log file.
[]An array of external property files containing run.results arrays to be merged with the root log file.
[]An array of external property files containing run.taxonomies arrays to be merged with the root log file.
[]An array of external property files containing run.addresses arrays to be merged with the root log file.
[]4 nested properties
Specifies the location of an artifact.
5 nested properties
A string containing a valid relative or absolute URI.
A string which indirectly specifies the absolute URI with respect to which a relative URI in the "uri" property is interpreted.
The index within the run artifacts array of the artifact object associated with the artifact location.
Key/value pairs that provide additional information about the object.
A stable, unique identifier for the external property file in the form of a GUID.
A non-negative integer specifying the number of items contained in the external property file.
Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]An array of external property files containing run.extensions arrays to be merged with the root log file.
[]An array of external property files containing run.policies arrays to be merged with the root log file.
[]An array of external property files containing run.translations arrays to be merged with the root log file.
[]An array of external property files containing run.requests arrays to be merged with the root log file.
[]An array of external property files containing run.responses arrays to be merged with the root log file.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]A proposed fix for the problem represented by a result object. A fix specifies a set of artifacts to modify. For each artifact, it specifies a set of bytes to remove, and provides a set of new bytes to replace them.
One or more artifact changes that comprise a fix for a result.
Encapsulates a message intended to be read by the end user.
5 nested properties
A plain text message string.
A Markdown message string.
The identifier for this message.
An array of strings to substitute into the message string.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]A network of nodes and directed edges that describes some aspect of the structure of the code (for example, a call graph).
Encapsulates a message intended to be read by the end user.
5 nested properties
A plain text message string.
A Markdown message string.
The identifier for this message.
An array of strings to substitute into the message string.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]An array of node objects representing the nodes of the graph.
[]An array of edge objects representing the edges of the graph.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]Represents a path through a graph.
The index within the run.graphs to be associated with the result.
The index within the result.graphs to be associated with the result.
Encapsulates a message intended to be read by the end user.
5 nested properties
A plain text message string.
A Markdown message string.
The identifier for this message.
An array of strings to substitute into the message string.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]Values of relevant expressions at the start of the graph traversal that may change during graph traversal.
Values of relevant expressions at the start of the graph traversal that remain constant for the graph traversal.
The sequences of edges traversed by this graph traversal.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]The runtime environment of the analysis tool run.
Specifies whether the tool's execution completed successfully.
The command line used to invoke the tool.
An array of strings, containing in order the command line arguments passed to the tool from the operating system.
The locations of any response files specified on the tool's command line.
The Coordinated Universal Time (UTC) date and time at which the run started. See "Date/time properties" in the SARIF spec for the required format.
The Coordinated Universal Time (UTC) date and time at which the run ended. See "Date/time properties" in the SARIF spec for the required format.
The process exit code.
An array of configurationOverride objects that describe rules related runtime overrides.
[]An array of configurationOverride objects that describe notifications related runtime overrides.
[]A list of runtime conditions detected by the tool during the analysis.
[]A list of conditions detected by the tool that are relevant to the tool's configuration.
[]The reason for the process exit.
The name of the signal that caused the process to exit.
The numeric value of the signal that caused the process to exit.
The reason given by the operating system that the process failed to start.
The machine that hosted the analysis tool run.
The account that ran the analysis tool.
The process id for the analysis tool run.
Specifies the location of an artifact.
5 nested properties
A string containing a valid relative or absolute URI.
A string which indirectly specifies the absolute URI with respect to which a relative URI in the "uri" property is interpreted.
The index within the run artifacts array of the artifact object associated with the artifact location.
Encapsulates a message intended to be read by the end user.
5 nested properties
A plain text message string.
A Markdown message string.
The identifier for this message.
An array of strings to substitute into the message string.
[]Key/value pairs that provide additional information about the object.
Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]Specifies the location of an artifact.
5 nested properties
A string containing a valid relative or absolute URI.
A string which indirectly specifies the absolute URI with respect to which a relative URI in the "uri" property is interpreted.
The index within the run artifacts array of the artifact object associated with the artifact location.
Encapsulates a message intended to be read by the end user.
5 nested properties
A plain text message string.
A Markdown message string.
The identifier for this message.
An array of strings to substitute into the message string.
[]Key/value pairs that provide additional information about the object.
Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]The environment variables associated with the analysis tool process, expressed as key/value pairs.
Specifies the location of an artifact.
5 nested properties
A string containing a valid relative or absolute URI.
A string which indirectly specifies the absolute URI with respect to which a relative URI in the "uri" property is interpreted.
The index within the run artifacts array of the artifact object associated with the artifact location.
Encapsulates a message intended to be read by the end user.
5 nested properties
A plain text message string.
A Markdown message string.
The identifier for this message.
An array of strings to substitute into the message string.
[]Key/value pairs that provide additional information about the object.
Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]Specifies the location of an artifact.
5 nested properties
A string containing a valid relative or absolute URI.
A string which indirectly specifies the absolute URI with respect to which a relative URI in the "uri" property is interpreted.
The index within the run artifacts array of the artifact object associated with the artifact location.
Encapsulates a message intended to be read by the end user.
5 nested properties
A plain text message string.
A Markdown message string.
The identifier for this message.
An array of strings to substitute into the message string.
[]Key/value pairs that provide additional information about the object.
Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]Specifies the location of an artifact.
5 nested properties
A string containing a valid relative or absolute URI.
A string which indirectly specifies the absolute URI with respect to which a relative URI in the "uri" property is interpreted.
The index within the run artifacts array of the artifact object associated with the artifact location.
Encapsulates a message intended to be read by the end user.
5 nested properties
A plain text message string.
A Markdown message string.
The identifier for this message.
An array of strings to substitute into the message string.
[]Key/value pairs that provide additional information about the object.
Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]Specifies the location of an artifact.
5 nested properties
A string containing a valid relative or absolute URI.
A string which indirectly specifies the absolute URI with respect to which a relative URI in the "uri" property is interpreted.
The index within the run artifacts array of the artifact object associated with the artifact location.
Encapsulates a message intended to be read by the end user.
5 nested properties
A plain text message string.
A Markdown message string.
The identifier for this message.
An array of strings to substitute into the message string.
[]Key/value pairs that provide additional information about the object.
Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]A location within a programming artifact.
Value that distinguishes this location from all other locations within a single result object.
A physical location relevant to a result. Specifies a reference to a programming artifact together with a range of bytes or characters within that artifact.
5 nested properties
A physical or virtual address, or a range of addresses, in an 'addressable region' (memory or a binary file).
10 nested properties
The address expressed as a byte offset from the start of the addressable region.
The address expressed as a byte offset from the absolute address of the top-most parent object.
The number of bytes in this range of addresses.
An open-ended string that identifies the address kind. 'data', 'function', 'header','instruction', 'module', 'page', 'section', 'segment', 'stack', 'stackFrame', 'table' are well-known values.
A name that is associated with the address, e.g., '.text'.
A human-readable fully qualified name that is associated with the address.
The byte offset of this address from the absolute or relative address of the parent object.
The index within run.addresses of the cached object for this address.
The index within run.addresses of the parent object.
Key/value pairs that provide additional information about the object.
Specifies the location of an artifact.
5 nested properties
A string containing a valid relative or absolute URI.
A string which indirectly specifies the absolute URI with respect to which a relative URI in the "uri" property is interpreted.
The index within the run artifacts array of the artifact object associated with the artifact location.
Key/value pairs that provide additional information about the object.
A region within an artifact where a result was detected.
12 nested properties
The line number of the first character in the region.
The column number of the first character in the region.
The line number of the last character in the region.
The column number of the character following the end of the region.
The zero-based offset from the beginning of the artifact of the first character in the region.
The length of the region in characters.
The zero-based offset from the beginning of the artifact of the first byte in the region.
The length of the region in bytes.
Represents the contents of an artifact.
Specifies the source language, if any, of the portion of the artifact specified by the region object.
Key/value pairs that provide additional information about the object.
A region within an artifact where a result was detected.
12 nested properties
The line number of the first character in the region.
The column number of the first character in the region.
The line number of the last character in the region.
The column number of the character following the end of the region.
The zero-based offset from the beginning of the artifact of the first character in the region.
The length of the region in characters.
The zero-based offset from the beginning of the artifact of the first byte in the region.
The length of the region in bytes.
Represents the contents of an artifact.
Specifies the source language, if any, of the portion of the artifact specified by the region object.
Key/value pairs that provide additional information about the object.
Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]The logical locations associated with the result.
[]Encapsulates a message intended to be read by the end user.
5 nested properties
A plain text message string.
A Markdown message string.
The identifier for this message.
An array of strings to substitute into the message string.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]An array of objects that describe relationships between this location and others.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]Information about the relation of one location to another.
A reference to the related location.
A set of distinct strings that categorize the relationship. Well-known kinds include 'includes', 'isIncludedBy' and 'relevant'.
[
"relevant"
]Encapsulates a message intended to be read by the end user.
5 nested properties
A plain text message string.
A Markdown message string.
The identifier for this message.
An array of strings to substitute into the message string.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]A logical location of a construct that produced a result.
Identifies the construct in which the result occurred. For example, this property might contain the name of a class or a method.
The index within the logical locations array.
The human-readable fully qualified name of the logical location.
The machine-readable name for the logical location, such as a mangled function name provided by a C++ compiler that encodes calling convention, return type and other details along with the function name.
Identifies the index of the immediate parent of the construct in which the result was detected. For example, this property might point to a logical location that represents the namespace that holds a type.
The type of construct this logical location component refers to. Should be one of 'function', 'member', 'module', 'namespace', 'parameter', 'resource', 'returnType', 'type', 'variable', 'object', 'array', 'property', 'value', 'element', 'text', 'attribute', 'comment', 'declaration', 'dtd' or 'processingInstruction', if any of those accurately describe the construct.
Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]Encapsulates a message intended to be read by the end user.
A plain text message string.
A Markdown message string.
The identifier for this message.
An array of strings to substitute into the message string.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]A message string or message format string rendered in multiple formats.
A plain text message string or format string.
A Markdown message string or format string.
Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]Represents a node in a graph.
A string that uniquely identifies the node within its graph.
Encapsulates a message intended to be read by the end user.
5 nested properties
A plain text message string.
A Markdown message string.
The identifier for this message.
An array of strings to substitute into the message string.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]A location within a programming artifact.
7 nested properties
Value that distinguishes this location from all other locations within a single result object.
A physical location relevant to a result. Specifies a reference to a programming artifact together with a range of bytes or characters within that artifact.
5 nested properties
A physical or virtual address, or a range of addresses, in an 'addressable region' (memory or a binary file).
Specifies the location of an artifact.
A region within an artifact where a result was detected.
A region within an artifact where a result was detected.
Key/value pairs that provide additional information about the object.
The logical locations associated with the result.
[]Encapsulates a message intended to be read by the end user.
5 nested properties
A plain text message string.
A Markdown message string.
The identifier for this message.
An array of strings to substitute into the message string.
[]Key/value pairs that provide additional information about the object.
An array of objects that describe relationships between this location and others.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]Describes a condition relevant to the tool itself, as opposed to being relevant to a target being analyzed by the tool.
Encapsulates a message intended to be read by the end user.
5 nested properties
A plain text message string.
A Markdown message string.
The identifier for this message.
An array of strings to substitute into the message string.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]A value specifying the severity level of the notification.
The thread identifier of the code that generated the notification.
The Coordinated Universal Time (UTC) date and time at which the analysis tool generated the notification.
5 nested properties
A string that identifies the kind of exception, for example, the fully qualified type name of an object that was thrown, or the symbolic name of a signal.
A message that describes the exception.
A call stack that is relevant to a result.
3 nested properties
An array of stack frames that represents a sequence of calls, rendered in reverse chronological order, that comprise the call stack.
Key/value pairs that provide additional information about the object.
An array of exception objects each of which is considered a cause of this exception.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]Information about how to locate a relevant reporting descriptor.
5 nested properties
The id of the descriptor.
The index into an array of descriptors in toolComponent.ruleDescriptors, toolComponent.notificationDescriptors, or toolComponent.taxonomyDescriptors, depending on context.
A guid that uniquely identifies the descriptor.
4 nested properties
The 'name' property of the referenced toolComponent.
An index into the referenced toolComponent in tool.extensions.
The 'guid' property of the referenced toolComponent.
Key/value pairs that provide additional information about the object.
Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]Information about how to locate a relevant reporting descriptor.
5 nested properties
The id of the descriptor.
The index into an array of descriptors in toolComponent.ruleDescriptors, toolComponent.notificationDescriptors, or toolComponent.taxonomyDescriptors, depending on context.
A guid that uniquely identifies the descriptor.
4 nested properties
The 'name' property of the referenced toolComponent.
An index into the referenced toolComponent in tool.extensions.
The 'guid' property of the referenced toolComponent.
Key/value pairs that provide additional information about the object.
Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]A physical location relevant to a result. Specifies a reference to a programming artifact together with a range of bytes or characters within that artifact.
A physical or virtual address, or a range of addresses, in an 'addressable region' (memory or a binary file).
10 nested properties
The address expressed as a byte offset from the start of the addressable region.
The address expressed as a byte offset from the absolute address of the top-most parent object.
The number of bytes in this range of addresses.
An open-ended string that identifies the address kind. 'data', 'function', 'header','instruction', 'module', 'page', 'section', 'segment', 'stack', 'stackFrame', 'table' are well-known values.
A name that is associated with the address, e.g., '.text'.
A human-readable fully qualified name that is associated with the address.
The byte offset of this address from the absolute or relative address of the parent object.
The index within run.addresses of the cached object for this address.
The index within run.addresses of the parent object.
Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]Specifies the location of an artifact.
5 nested properties
A string containing a valid relative or absolute URI.
A string which indirectly specifies the absolute URI with respect to which a relative URI in the "uri" property is interpreted.
The index within the run artifacts array of the artifact object associated with the artifact location.
Encapsulates a message intended to be read by the end user.
5 nested properties
A plain text message string.
A Markdown message string.
The identifier for this message.
An array of strings to substitute into the message string.
[]Key/value pairs that provide additional information about the object.
Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]A region within an artifact where a result was detected.
12 nested properties
The line number of the first character in the region.
The column number of the first character in the region.
The line number of the last character in the region.
The column number of the character following the end of the region.
The zero-based offset from the beginning of the artifact of the first character in the region.
The length of the region in characters.
The zero-based offset from the beginning of the artifact of the first byte in the region.
The length of the region in bytes.
Represents the contents of an artifact.
4 nested properties
UTF-8-encoded content from a text artifact.
MIME Base64-encoded content from a binary artifact, or from a text artifact in its original encoding.
A message string or message format string rendered in multiple formats.
Key/value pairs that provide additional information about the object.
Encapsulates a message intended to be read by the end user.
5 nested properties
A plain text message string.
A Markdown message string.
The identifier for this message.
An array of strings to substitute into the message string.
[]Key/value pairs that provide additional information about the object.
Specifies the source language, if any, of the portion of the artifact specified by the region object.
Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]A region within an artifact where a result was detected.
12 nested properties
The line number of the first character in the region.
The column number of the first character in the region.
The line number of the last character in the region.
The column number of the character following the end of the region.
The zero-based offset from the beginning of the artifact of the first character in the region.
The length of the region in characters.
The zero-based offset from the beginning of the artifact of the first byte in the region.
The length of the region in bytes.
Represents the contents of an artifact.
4 nested properties
UTF-8-encoded content from a text artifact.
MIME Base64-encoded content from a binary artifact, or from a text artifact in its original encoding.
A message string or message format string rendered in multiple formats.
Key/value pairs that provide additional information about the object.
Encapsulates a message intended to be read by the end user.
5 nested properties
A plain text message string.
A Markdown message string.
The identifier for this message.
An array of strings to substitute into the message string.
[]Key/value pairs that provide additional information about the object.
Specifies the source language, if any, of the portion of the artifact specified by the region object.
Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]Key/value pairs that provide additional information about the object.
A set of distinct strings that provide additional information.
[]An area within an image.
The Y coordinate of the top edge of the rectangle, measured in the image's natural units.
The X coordinate of the left edge of the rectangle, measured in the image's natural units.
The Y coordinate of the bottom edge of the rectangle, measured in the image's natural units.
The X coordinate of the right edge of the rectangle, measured in the image's natural units.
Encapsulates a message intended to be read by the end user.
5 nested properties
A plain text message string.
A Markdown message string.
The identifier for this message.
An array of strings to substitute into the message string.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]A region within an artifact where a result was detected.
The line number of the first character in the region.
The column number of the first character in the region.
The line number of the last character in the region.
The column number of the character following the end of the region.
The zero-based offset from the beginning of the artifact of the first character in the region.
The length of the region in characters.
The zero-based offset from the beginning of the artifact of the first byte in the region.
The length of the region in bytes.
Represents the contents of an artifact.
4 nested properties
UTF-8-encoded content from a text artifact.
MIME Base64-encoded content from a binary artifact, or from a text artifact in its original encoding.
A message string or message format string rendered in multiple formats.
3 nested properties
A plain text message string or format string.
A Markdown message string or format string.
Key/value pairs that provide additional information about the object.
Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]Encapsulates a message intended to be read by the end user.
5 nested properties
A plain text message string.
A Markdown message string.
The identifier for this message.
An array of strings to substitute into the message string.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]Specifies the source language, if any, of the portion of the artifact specified by the region object.
Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]The replacement of a single region of an artifact.
A region within an artifact where a result was detected.
12 nested properties
The line number of the first character in the region.
The column number of the first character in the region.
The line number of the last character in the region.
The column number of the character following the end of the region.
The zero-based offset from the beginning of the artifact of the first character in the region.
The length of the region in characters.
The zero-based offset from the beginning of the artifact of the first byte in the region.
The length of the region in bytes.
Represents the contents of an artifact.
4 nested properties
UTF-8-encoded content from a text artifact.
MIME Base64-encoded content from a binary artifact, or from a text artifact in its original encoding.
A message string or message format string rendered in multiple formats.
Key/value pairs that provide additional information about the object.
Encapsulates a message intended to be read by the end user.
5 nested properties
A plain text message string.
A Markdown message string.
The identifier for this message.
An array of strings to substitute into the message string.
[]Key/value pairs that provide additional information about the object.
Specifies the source language, if any, of the portion of the artifact specified by the region object.
Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]Represents the contents of an artifact.
4 nested properties
UTF-8-encoded content from a text artifact.
MIME Base64-encoded content from a binary artifact, or from a text artifact in its original encoding.
A message string or message format string rendered in multiple formats.
3 nested properties
A plain text message string or format string.
A Markdown message string or format string.
Key/value pairs that provide additional information about the object.
Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]Metadata that describes a specific report produced by the tool, as part of the analysis it provides or its runtime reporting.
A stable, opaque identifier for the report.
An array of stable, opaque identifiers by which this report was known in some previous version of the analysis tool.
A unique identifier for the reporting descriptor in the form of a GUID.
An array of unique identifies in the form of a GUID by which this report was known in some previous version of the analysis tool.
A report identifier that is understandable to an end user.
An array of readable identifiers by which this report was known in some previous version of the analysis tool.
A message string or message format string rendered in multiple formats.
3 nested properties
A plain text message string or format string.
A Markdown message string or format string.
Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]A message string or message format string rendered in multiple formats.
3 nested properties
A plain text message string or format string.
A Markdown message string or format string.
Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]A set of name/value pairs with arbitrary names. Each value is a multiformatMessageString object, which holds message strings in plain text and (optionally) Markdown format. The strings can include placeholders, which can be used to construct a message in combination with an arbitrary number of additional string arguments.
Information about a rule or notification that can be configured at runtime.
5 nested properties
Specifies whether the report may be produced during the scan.
Specifies the failure level for the report.
Specifies the relative priority of the report. Used for analysis output only.
Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]A URI where the primary documentation for the report can be found.
A message string or message format string rendered in multiple formats.
3 nested properties
A plain text message string or format string.
A Markdown message string or format string.
Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]An array of objects that describe relationships between this reporting descriptor and others.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]Information about a rule or notification that can be configured at runtime.
Specifies whether the report may be produced during the scan.
Specifies the failure level for the report.
Specifies the relative priority of the report. Used for analysis output only.
Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]Information about how to locate a relevant reporting descriptor.
The id of the descriptor.
The index into an array of descriptors in toolComponent.ruleDescriptors, toolComponent.notificationDescriptors, or toolComponent.taxonomyDescriptors, depending on context.
A guid that uniquely identifies the descriptor.
4 nested properties
The 'name' property of the referenced toolComponent.
An index into the referenced toolComponent in tool.extensions.
The 'guid' property of the referenced toolComponent.
Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]Information about the relation of one reporting descriptor to another.
Information about how to locate a relevant reporting descriptor.
5 nested properties
The id of the descriptor.
The index into an array of descriptors in toolComponent.ruleDescriptors, toolComponent.notificationDescriptors, or toolComponent.taxonomyDescriptors, depending on context.
A guid that uniquely identifies the descriptor.
4 nested properties
The 'name' property of the referenced toolComponent.
An index into the referenced toolComponent in tool.extensions.
The 'guid' property of the referenced toolComponent.
Key/value pairs that provide additional information about the object.
Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]A set of distinct strings that categorize the relationship. Well-known kinds include 'canPrecede', 'canFollow', 'willPrecede', 'willFollow', 'superset', 'subset', 'equal', 'disjoint', 'relevant', and 'incomparable'.
[
"relevant"
]Encapsulates a message intended to be read by the end user.
5 nested properties
A plain text message string.
A Markdown message string.
The identifier for this message.
An array of strings to substitute into the message string.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]A result produced by an analysis tool.
Encapsulates a message intended to be read by the end user.
5 nested properties
A plain text message string.
A Markdown message string.
The identifier for this message.
An array of strings to substitute into the message string.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]The stable, unique identifier of the rule, if any, to which this notification is relevant. This member can be used to retrieve rule metadata from the rules dictionary, if it exists.
The index within the tool component rules array of the rule object associated with this result.
Information about how to locate a relevant reporting descriptor.
5 nested properties
The id of the descriptor.
The index into an array of descriptors in toolComponent.ruleDescriptors, toolComponent.notificationDescriptors, or toolComponent.taxonomyDescriptors, depending on context.
A guid that uniquely identifies the descriptor.
4 nested properties
The 'name' property of the referenced toolComponent.
An index into the referenced toolComponent in tool.extensions.
The 'guid' property of the referenced toolComponent.
Key/value pairs that provide additional information about the object.
Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]A value that categorizes results by evaluation state.
A value specifying the severity level of the result.
Specifies the location of an artifact.
5 nested properties
A string containing a valid relative or absolute URI.
A string which indirectly specifies the absolute URI with respect to which a relative URI in the "uri" property is interpreted.
The index within the run artifacts array of the artifact object associated with the artifact location.
Encapsulates a message intended to be read by the end user.
5 nested properties
A plain text message string.
A Markdown message string.
The identifier for this message.
An array of strings to substitute into the message string.
[]Key/value pairs that provide additional information about the object.
Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]The set of locations where the result was detected. Specify only one location unless the problem indicated by the result can only be corrected by making a change at every specified location.
[]A stable, unique identifier for the result in the form of a GUID.
A stable, unique identifier for the equivalence class of logically identical results to which this result belongs, in the form of a GUID.
A positive integer specifying the number of times this logically unique result was observed in this run.
A set of strings that contribute to the stable, unique identity of the result.
A set of strings each of which individually defines a stable, unique identity for the result.
An array of zero or more unique graph objects associated with the result.
[]An array of one or more unique 'graphTraversal' objects.
[]A set of locations relevant to this result.
[]A set of suppressions relevant to this result.
The state of a result relative to a baseline of a previous run.
A number representing the priority or importance of the result.
An absolute URI at which the result can be viewed.
The URIs of the work items associated with this result.
Contains information about how and when a result was detected.
7 nested properties
The Coordinated Universal Time (UTC) date and time at which the result was first detected. See "Date/time properties" in the SARIF spec for the required format.
The Coordinated Universal Time (UTC) date and time at which the result was most recently detected. See "Date/time properties" in the SARIF spec for the required format.
A GUID-valued string equal to the automationDetails.guid property of the run in which the result was first detected.
A GUID-valued string equal to the automationDetails.guid property of the run in which the result was most recently detected.
The index within the run.invocations array of the invocation object which describes the tool invocation that detected the result.
An array of physicalLocation objects which specify the portions of an analysis tool's output that a converter transformed into the result.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]An array of 'fix' objects, each of which represents a proposed fix to the problem indicated by the result.
[]An array of references to taxonomy reporting descriptors that are applicable to the result.
[]A web request object.
9 nested properties
The index within the run.webRequests array of the request object associated with this result.
The request protocol. Example: 'http'.
The request version. Example: '1.1'.
The target of the request.
The HTTP method. Well-known values are 'GET', 'PUT', 'POST', 'DELETE', 'PATCH', 'HEAD', 'OPTIONS', 'TRACE', 'CONNECT'.
The request headers.
The request parameters.
Represents the contents of an artifact.
4 nested properties
UTF-8-encoded content from a text artifact.
MIME Base64-encoded content from a binary artifact, or from a text artifact in its original encoding.
A message string or message format string rendered in multiple formats.
Key/value pairs that provide additional information about the object.
Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]A web response object.
9 nested properties
The index within the run.webResponses array of the response object associated with this result.
The response protocol. Example: 'http'.
The response version. Example: '1.1'.
The response status code. Example: 451.
The response reason. Example: 'Not found'.
The response headers.
Represents the contents of an artifact.
4 nested properties
UTF-8-encoded content from a text artifact.
MIME Base64-encoded content from a binary artifact, or from a text artifact in its original encoding.
A message string or message format string rendered in multiple formats.
Key/value pairs that provide additional information about the object.
Specifies whether a response was received from the server.
Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]Contains information about how and when a result was detected.
The Coordinated Universal Time (UTC) date and time at which the result was first detected. See "Date/time properties" in the SARIF spec for the required format.
The Coordinated Universal Time (UTC) date and time at which the result was most recently detected. See "Date/time properties" in the SARIF spec for the required format.
A GUID-valued string equal to the automationDetails.guid property of the run in which the result was first detected.
A GUID-valued string equal to the automationDetails.guid property of the run in which the result was most recently detected.
The index within the run.invocations array of the invocation object which describes the tool invocation that detected the result.
An array of physicalLocation objects which specify the portions of an analysis tool's output that a converter transformed into the result.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]Describes a single run of an analysis tool, and contains the reported output of that run.
The analysis tool that was run.
3 nested properties
A component, such as a plug-in or the driver, of the analysis tool that was run.
28 nested properties
The name of the tool component.
A unique identifier for the tool component in the form of a GUID.
The organization or company that produced the tool component.
A product suite to which the tool component belongs.
A localizable string containing the name of the suite of products to which the tool component belongs.
A message string or message format string rendered in multiple formats.
A message string or message format string rendered in multiple formats.
The name of the tool component along with its version and any other useful identifying information, such as its locale.
The tool component version, in whatever format the component natively provides.
The tool component version in the format specified by Semantic Versioning 2.0.
The binary version of the tool component's primary executable file expressed as four non-negative integers separated by a period (for operating systems that express file versions in this way).
A string specifying the UTC date (and optionally, the time) of the component's release.
The absolute URI from which the tool component can be downloaded.
The absolute URI at which information about this version of the tool component can be found.
A dictionary, each of whose keys is a resource identifier and each of whose values is a multiformatMessageString object, which holds message strings in plain text and (optionally) Markdown format. The strings can include placeholders, which can be used to construct a message in combination with an arbitrary number of additional string arguments.
An array of reportingDescriptor objects relevant to the notifications related to the configuration and runtime execution of the tool component.
[]An array of reportingDescriptor objects relevant to the analysis performed by the tool component.
[]An array of reportingDescriptor objects relevant to the definitions of both standalone and tool-defined taxonomies.
[]An array of the artifactLocation objects associated with the tool component.
[]The language of the messages emitted into the log file during this run (expressed as an ISO 639-1 two-letter lowercase language code) and an optional region (expressed as an ISO 3166-1 two-letter uppercase subculture code associated with a country or region). The casing is recommended but not required (in order for this data to conform to RFC5646).
The kinds of data contained in this object.
[
"localizedData",
"nonLocalizedData"
]Specifies whether this object contains a complete definition of the localizable and/or non-localizable data for this component, as opposed to including only data that is relevant to the results persisted to this log file.
The semantic version of the localized strings defined in this component; maintained by components that provide translations.
The minimum value of localizedDataSemanticVersion required in translations consumed by this component; used by components that consume translations.
Provides additional metadata related to translation.
An array of toolComponentReference objects to declare the taxonomies supported by the tool component.
[]Key/value pairs that provide additional information about the object.
Tool extensions that contributed to or reconfigured the analysis tool that was run.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]Describes how a converter transformed the output of a static analysis tool from the analysis tool's native output format into the SARIF format.
4 nested properties
The analysis tool that was run.
3 nested properties
A component, such as a plug-in or the driver, of the analysis tool that was run.
Tool extensions that contributed to or reconfigured the analysis tool that was run.
[]Key/value pairs that provide additional information about the object.
The runtime environment of the analysis tool run.
26 nested properties
Specifies whether the tool's execution completed successfully.
The command line used to invoke the tool.
An array of strings, containing in order the command line arguments passed to the tool from the operating system.
The locations of any response files specified on the tool's command line.
The Coordinated Universal Time (UTC) date and time at which the run started. See "Date/time properties" in the SARIF spec for the required format.
The Coordinated Universal Time (UTC) date and time at which the run ended. See "Date/time properties" in the SARIF spec for the required format.
The process exit code.
An array of configurationOverride objects that describe rules related runtime overrides.
[]An array of configurationOverride objects that describe notifications related runtime overrides.
[]A list of runtime conditions detected by the tool during the analysis.
[]A list of conditions detected by the tool that are relevant to the tool's configuration.
[]The reason for the process exit.
The name of the signal that caused the process to exit.
The numeric value of the signal that caused the process to exit.
The reason given by the operating system that the process failed to start.
The machine that hosted the analysis tool run.
The account that ran the analysis tool.
The process id for the analysis tool run.
Specifies the location of an artifact.
Specifies the location of an artifact.
The environment variables associated with the analysis tool process, expressed as key/value pairs.
Specifies the location of an artifact.
Specifies the location of an artifact.
Specifies the location of an artifact.
Specifies the location of an artifact.
Key/value pairs that provide additional information about the object.
The locations of the analysis tool's per-run log files.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]The language of the messages emitted into the log file during this run (expressed as an ISO 639-1 two-letter lowercase culture code) and an optional region (expressed as an ISO 3166-1 two-letter uppercase subculture code associated with a country or region). The casing is recommended but not required (in order for this data to conform to RFC5646).
Specifies the revision in version control of the artifacts that were scanned.
[]The artifact location specified by each uriBaseId symbol on the machine where the tool originally ran.
An array of logical locations such as namespaces, types or functions.
[]An array of zero or more unique graph objects associated with the run.
[]The set of results contained in an SARIF log. The results array can be omitted when a run is solely exporting rules metadata. It must be present (but may be empty) if a log file represents an actual scan.
Information that describes a run's identity and role within an engineering system process.
5 nested properties
Encapsulates a message intended to be read by the end user.
5 nested properties
A plain text message string.
A Markdown message string.
The identifier for this message.
An array of strings to substitute into the message string.
[]Key/value pairs that provide additional information about the object.
A hierarchical string that uniquely identifies this object's containing run object.
A stable, unique identifier for this object's containing run object in the form of a GUID.
A stable, unique identifier for the equivalence class of runs to which this object's containing run object belongs in the form of a GUID.
Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]Automation details that describe the aggregate of runs to which this run belongs.
[]The 'guid' property of a previous SARIF 'run' that comprises the baseline that was used to compute result 'baselineState' properties for the run.
An array of strings used to replace sensitive information in a redaction-aware property.
[]Specifies the default encoding for any artifact object that refers to a text file.
Specifies the default source language for any artifact object that refers to a text file that contains source code.
An ordered list of character sequences that were treated as line breaks when computing region information for the run.
[
"\r\n",
"\n"
]Specifies the unit in which the tool measures columns.
References to external property files that should be inlined with the content of a root log file.
17 nested properties
4 nested properties
Specifies the location of an artifact.
A stable, unique identifier for the external property file in the form of a GUID.
A non-negative integer specifying the number of items contained in the external property file.
Key/value pairs that provide additional information about the object.
An array of external property files containing a run.graphs object to be merged with the root log file.
[]4 nested properties
Specifies the location of an artifact.
A stable, unique identifier for the external property file in the form of a GUID.
A non-negative integer specifying the number of items contained in the external property file.
Key/value pairs that provide additional information about the object.
An array of external property files containing run.artifacts arrays to be merged with the root log file.
[]An array of external property files containing run.invocations arrays to be merged with the root log file.
[]An array of external property files containing run.logicalLocations arrays to be merged with the root log file.
[]An array of external property files containing run.threadFlowLocations arrays to be merged with the root log file.
[]An array of external property files containing run.results arrays to be merged with the root log file.
[]An array of external property files containing run.taxonomies arrays to be merged with the root log file.
[]An array of external property files containing run.addresses arrays to be merged with the root log file.
[]4 nested properties
Specifies the location of an artifact.
A stable, unique identifier for the external property file in the form of a GUID.
A non-negative integer specifying the number of items contained in the external property file.
Key/value pairs that provide additional information about the object.
An array of external property files containing run.extensions arrays to be merged with the root log file.
[]An array of external property files containing run.policies arrays to be merged with the root log file.
[]An array of external property files containing run.translations arrays to be merged with the root log file.
[]An array of external property files containing run.requests arrays to be merged with the root log file.
[]An array of external property files containing run.responses arrays to be merged with the root log file.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]An array of threadFlowLocation objects cached at run level.
[]An array of toolComponent objects relevant to a taxonomy in which results are categorized.
[]The set of available translations of the localized data provided by the tool.
[]Contains configurations that may potentially override both reportingDescriptor.defaultConfiguration (the tool's default severities) and invocation.configurationOverrides (severities established at run-time from the command line).
[]An array of request objects cached at run level.
[]An array of response objects cached at run level.
[]Defines locations of special significance to SARIF consumers.
2 nested properties
Specifies the location of an artifact.
5 nested properties
A string containing a valid relative or absolute URI.
A string which indirectly specifies the absolute URI with respect to which a relative URI in the "uri" property is interpreted.
The index within the run artifacts array of the artifact object associated with the artifact location.
Key/value pairs that provide additional information about the object.
Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]Information that describes a run's identity and role within an engineering system process.
Encapsulates a message intended to be read by the end user.
5 nested properties
A plain text message string.
A Markdown message string.
The identifier for this message.
An array of strings to substitute into the message string.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]A hierarchical string that uniquely identifies this object's containing run object.
A stable, unique identifier for this object's containing run object in the form of a GUID.
A stable, unique identifier for the equivalence class of runs to which this object's containing run object belongs in the form of a GUID.
Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]Defines locations of special significance to SARIF consumers.
Specifies the location of an artifact.
5 nested properties
A string containing a valid relative or absolute URI.
A string which indirectly specifies the absolute URI with respect to which a relative URI in the "uri" property is interpreted.
The index within the run artifacts array of the artifact object associated with the artifact location.
Encapsulates a message intended to be read by the end user.
5 nested properties
A plain text message string.
A Markdown message string.
The identifier for this message.
An array of strings to substitute into the message string.
[]Key/value pairs that provide additional information about the object.
Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]A call stack that is relevant to a result.
An array of stack frames that represents a sequence of calls, rendered in reverse chronological order, that comprise the call stack.
Encapsulates a message intended to be read by the end user.
5 nested properties
A plain text message string.
A Markdown message string.
The identifier for this message.
An array of strings to substitute into the message string.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]A function call within a stack trace.
A location within a programming artifact.
7 nested properties
Value that distinguishes this location from all other locations within a single result object.
A physical location relevant to a result. Specifies a reference to a programming artifact together with a range of bytes or characters within that artifact.
5 nested properties
A physical or virtual address, or a range of addresses, in an 'addressable region' (memory or a binary file).
Specifies the location of an artifact.
A region within an artifact where a result was detected.
A region within an artifact where a result was detected.
Key/value pairs that provide additional information about the object.
The logical locations associated with the result.
[]Encapsulates a message intended to be read by the end user.
5 nested properties
A plain text message string.
A Markdown message string.
The identifier for this message.
An array of strings to substitute into the message string.
[]Key/value pairs that provide additional information about the object.
An array of objects that describe relationships between this location and others.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]The name of the module that contains the code of this stack frame.
The thread identifier of the stack frame.
The parameters of the call that is executing.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]A suppression that is relevant to a result.
A string that indicates where the suppression is persisted.
A stable, unique identifier for the suppression in the form of a GUID.
A string that indicates the state of the suppression.
A string representing the justification for the suppression.
A location within a programming artifact.
7 nested properties
Value that distinguishes this location from all other locations within a single result object.
A physical location relevant to a result. Specifies a reference to a programming artifact together with a range of bytes or characters within that artifact.
5 nested properties
A physical or virtual address, or a range of addresses, in an 'addressable region' (memory or a binary file).
Specifies the location of an artifact.
A region within an artifact where a result was detected.
A region within an artifact where a result was detected.
Key/value pairs that provide additional information about the object.
The logical locations associated with the result.
[]Encapsulates a message intended to be read by the end user.
5 nested properties
A plain text message string.
A Markdown message string.
The identifier for this message.
An array of strings to substitute into the message string.
[]Key/value pairs that provide additional information about the object.
An array of objects that describe relationships between this location and others.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]A temporally ordered array of 'threadFlowLocation' objects, each of which describes a location visited by the tool while producing the result.
An string that uniquely identifies the threadFlow within the codeFlow in which it occurs.
Encapsulates a message intended to be read by the end user.
5 nested properties
A plain text message string.
A Markdown message string.
The identifier for this message.
An array of strings to substitute into the message string.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]Values of relevant expressions at the start of the thread flow that may change during thread flow execution.
Values of relevant expressions at the start of the thread flow that remain constant.
Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]A location visited by an analysis tool while simulating or monitoring the execution of a program.
The index within the run threadFlowLocations array.
A location within a programming artifact.
7 nested properties
Value that distinguishes this location from all other locations within a single result object.
A physical location relevant to a result. Specifies a reference to a programming artifact together with a range of bytes or characters within that artifact.
5 nested properties
A physical or virtual address, or a range of addresses, in an 'addressable region' (memory or a binary file).
Specifies the location of an artifact.
A region within an artifact where a result was detected.
A region within an artifact where a result was detected.
Key/value pairs that provide additional information about the object.
The logical locations associated with the result.
[]Encapsulates a message intended to be read by the end user.
5 nested properties
A plain text message string.
A Markdown message string.
The identifier for this message.
An array of strings to substitute into the message string.
[]Key/value pairs that provide additional information about the object.
An array of objects that describe relationships between this location and others.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]A call stack that is relevant to a result.
3 nested properties
An array of stack frames that represents a sequence of calls, rendered in reverse chronological order, that comprise the call stack.
Encapsulates a message intended to be read by the end user.
5 nested properties
A plain text message string.
A Markdown message string.
The identifier for this message.
An array of strings to substitute into the message string.
[]Key/value pairs that provide additional information about the object.
Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]A set of distinct strings that categorize the thread flow location. Well-known kinds include 'acquire', 'release', 'enter', 'exit', 'call', 'return', 'branch', 'implicit', 'false', 'true', 'caution', 'danger', 'unknown', 'unreachable', 'taint', 'function', 'handler', 'lock', 'memory', 'resource', 'scope' and 'value'.
[]An array of references to rule or taxonomy reporting descriptors that are applicable to the thread flow location.
[]The name of the module that contains the code that is executing.
A dictionary, each of whose keys specifies a variable or expression, the associated value of which represents the variable or expression value. For an annotation of kind 'continuation', for example, this dictionary might hold the current assumed values of a set of global variables.
An integer representing a containment hierarchy within the thread flow.
An integer representing the temporal order in which execution reached this location.
The Coordinated Universal Time (UTC) date and time at which this location was executed.
Specifies the importance of this location in understanding the code flow in which it occurs. The order from most to least important is "essential", "important", "unimportant". Default: "important".
A web request object.
9 nested properties
The index within the run.webRequests array of the request object associated with this result.
The request protocol. Example: 'http'.
The request version. Example: '1.1'.
The target of the request.
The HTTP method. Well-known values are 'GET', 'PUT', 'POST', 'DELETE', 'PATCH', 'HEAD', 'OPTIONS', 'TRACE', 'CONNECT'.
The request headers.
The request parameters.
Represents the contents of an artifact.
4 nested properties
UTF-8-encoded content from a text artifact.
MIME Base64-encoded content from a binary artifact, or from a text artifact in its original encoding.
A message string or message format string rendered in multiple formats.
Key/value pairs that provide additional information about the object.
Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]A web response object.
9 nested properties
The index within the run.webResponses array of the response object associated with this result.
The response protocol. Example: 'http'.
The response version. Example: '1.1'.
The response status code. Example: 451.
The response reason. Example: 'Not found'.
The response headers.
Represents the contents of an artifact.
4 nested properties
UTF-8-encoded content from a text artifact.
MIME Base64-encoded content from a binary artifact, or from a text artifact in its original encoding.
A message string or message format string rendered in multiple formats.
Key/value pairs that provide additional information about the object.
Specifies whether a response was received from the server.
Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]The analysis tool that was run.
A component, such as a plug-in or the driver, of the analysis tool that was run.
28 nested properties
The name of the tool component.
A unique identifier for the tool component in the form of a GUID.
The organization or company that produced the tool component.
A product suite to which the tool component belongs.
A localizable string containing the name of the suite of products to which the tool component belongs.
A message string or message format string rendered in multiple formats.
3 nested properties
A plain text message string or format string.
A Markdown message string or format string.
Key/value pairs that provide additional information about the object.
A message string or message format string rendered in multiple formats.
3 nested properties
A plain text message string or format string.
A Markdown message string or format string.
Key/value pairs that provide additional information about the object.
The name of the tool component along with its version and any other useful identifying information, such as its locale.
The tool component version, in whatever format the component natively provides.
The tool component version in the format specified by Semantic Versioning 2.0.
The binary version of the tool component's primary executable file expressed as four non-negative integers separated by a period (for operating systems that express file versions in this way).
A string specifying the UTC date (and optionally, the time) of the component's release.
The absolute URI from which the tool component can be downloaded.
The absolute URI at which information about this version of the tool component can be found.
A dictionary, each of whose keys is a resource identifier and each of whose values is a multiformatMessageString object, which holds message strings in plain text and (optionally) Markdown format. The strings can include placeholders, which can be used to construct a message in combination with an arbitrary number of additional string arguments.
An array of reportingDescriptor objects relevant to the notifications related to the configuration and runtime execution of the tool component.
[]An array of reportingDescriptor objects relevant to the analysis performed by the tool component.
[]An array of reportingDescriptor objects relevant to the definitions of both standalone and tool-defined taxonomies.
[]An array of the artifactLocation objects associated with the tool component.
[]The language of the messages emitted into the log file during this run (expressed as an ISO 639-1 two-letter lowercase language code) and an optional region (expressed as an ISO 3166-1 two-letter uppercase subculture code associated with a country or region). The casing is recommended but not required (in order for this data to conform to RFC5646).
The kinds of data contained in this object.
[
"localizedData",
"nonLocalizedData"
]Specifies whether this object contains a complete definition of the localizable and/or non-localizable data for this component, as opposed to including only data that is relevant to the results persisted to this log file.
The semantic version of the localized strings defined in this component; maintained by components that provide translations.
The minimum value of localizedDataSemanticVersion required in translations consumed by this component; used by components that consume translations.
4 nested properties
The 'name' property of the referenced toolComponent.
An index into the referenced toolComponent in tool.extensions.
The 'guid' property of the referenced toolComponent.
Key/value pairs that provide additional information about the object.
Provides additional metadata related to translation.
7 nested properties
The name associated with the translation metadata.
The full name associated with the translation metadata.
A message string or message format string rendered in multiple formats.
A message string or message format string rendered in multiple formats.
The absolute URI from which the translation metadata can be downloaded.
The absolute URI from which information related to the translation metadata can be downloaded.
Key/value pairs that provide additional information about the object.
An array of toolComponentReference objects to declare the taxonomies supported by the tool component.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]Tool extensions that contributed to or reconfigured the analysis tool that was run.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]A component, such as a plug-in or the driver, of the analysis tool that was run.
The name of the tool component.
A unique identifier for the tool component in the form of a GUID.
The organization or company that produced the tool component.
A product suite to which the tool component belongs.
A localizable string containing the name of the suite of products to which the tool component belongs.
A message string or message format string rendered in multiple formats.
3 nested properties
A plain text message string or format string.
A Markdown message string or format string.
Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]A message string or message format string rendered in multiple formats.
3 nested properties
A plain text message string or format string.
A Markdown message string or format string.
Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]The name of the tool component along with its version and any other useful identifying information, such as its locale.
The tool component version, in whatever format the component natively provides.
The tool component version in the format specified by Semantic Versioning 2.0.
The binary version of the tool component's primary executable file expressed as four non-negative integers separated by a period (for operating systems that express file versions in this way).
A string specifying the UTC date (and optionally, the time) of the component's release.
The absolute URI from which the tool component can be downloaded.
The absolute URI at which information about this version of the tool component can be found.
A dictionary, each of whose keys is a resource identifier and each of whose values is a multiformatMessageString object, which holds message strings in plain text and (optionally) Markdown format. The strings can include placeholders, which can be used to construct a message in combination with an arbitrary number of additional string arguments.
An array of reportingDescriptor objects relevant to the notifications related to the configuration and runtime execution of the tool component.
[]An array of reportingDescriptor objects relevant to the analysis performed by the tool component.
[]An array of reportingDescriptor objects relevant to the definitions of both standalone and tool-defined taxonomies.
[]An array of the artifactLocation objects associated with the tool component.
[]The language of the messages emitted into the log file during this run (expressed as an ISO 639-1 two-letter lowercase language code) and an optional region (expressed as an ISO 3166-1 two-letter uppercase subculture code associated with a country or region). The casing is recommended but not required (in order for this data to conform to RFC5646).
The kinds of data contained in this object.
[
"localizedData",
"nonLocalizedData"
]Specifies whether this object contains a complete definition of the localizable and/or non-localizable data for this component, as opposed to including only data that is relevant to the results persisted to this log file.
The semantic version of the localized strings defined in this component; maintained by components that provide translations.
The minimum value of localizedDataSemanticVersion required in translations consumed by this component; used by components that consume translations.
4 nested properties
The 'name' property of the referenced toolComponent.
An index into the referenced toolComponent in tool.extensions.
The 'guid' property of the referenced toolComponent.
Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]Provides additional metadata related to translation.
7 nested properties
The name associated with the translation metadata.
The full name associated with the translation metadata.
A message string or message format string rendered in multiple formats.
3 nested properties
A plain text message string or format string.
A Markdown message string or format string.
Key/value pairs that provide additional information about the object.
A message string or message format string rendered in multiple formats.
3 nested properties
A plain text message string or format string.
A Markdown message string or format string.
Key/value pairs that provide additional information about the object.
The absolute URI from which the translation metadata can be downloaded.
The absolute URI from which information related to the translation metadata can be downloaded.
Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]An array of toolComponentReference objects to declare the taxonomies supported by the tool component.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]The 'name' property of the referenced toolComponent.
An index into the referenced toolComponent in tool.extensions.
The 'guid' property of the referenced toolComponent.
Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]Provides additional metadata related to translation.
The name associated with the translation metadata.
The full name associated with the translation metadata.
A message string or message format string rendered in multiple formats.
3 nested properties
A plain text message string or format string.
A Markdown message string or format string.
Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]A message string or message format string rendered in multiple formats.
3 nested properties
A plain text message string or format string.
A Markdown message string or format string.
Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]The absolute URI from which the translation metadata can be downloaded.
The absolute URI from which information related to the translation metadata can be downloaded.
Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]Specifies the information necessary to retrieve a desired revision from a version control system.
The absolute URI of the repository.
A string that uniquely and permanently identifies the revision within the repository.
The name of a branch containing the revision.
A tag that has been applied to the revision.
A Coordinated Universal Time (UTC) date and time that can be used to synchronize an enlistment to the state of the repository at that time.
Specifies the location of an artifact.
5 nested properties
A string containing a valid relative or absolute URI.
A string which indirectly specifies the absolute URI with respect to which a relative URI in the "uri" property is interpreted.
The index within the run artifacts array of the artifact object associated with the artifact location.
Encapsulates a message intended to be read by the end user.
5 nested properties
A plain text message string.
A Markdown message string.
The identifier for this message.
An array of strings to substitute into the message string.
[]Key/value pairs that provide additional information about the object.
Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]A web request object.
The index within the run.webRequests array of the request object associated with this result.
The request protocol. Example: 'http'.
The request version. Example: '1.1'.
The target of the request.
The HTTP method. Well-known values are 'GET', 'PUT', 'POST', 'DELETE', 'PATCH', 'HEAD', 'OPTIONS', 'TRACE', 'CONNECT'.
The request headers.
The request parameters.
Represents the contents of an artifact.
4 nested properties
UTF-8-encoded content from a text artifact.
MIME Base64-encoded content from a binary artifact, or from a text artifact in its original encoding.
A message string or message format string rendered in multiple formats.
3 nested properties
A plain text message string or format string.
A Markdown message string or format string.
Key/value pairs that provide additional information about the object.
Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]A web response object.
The index within the run.webResponses array of the response object associated with this result.
The response protocol. Example: 'http'.
The response version. Example: '1.1'.
The response status code. Example: 451.
The response reason. Example: 'Not found'.
The response headers.
Represents the contents of an artifact.
4 nested properties
UTF-8-encoded content from a text artifact.
MIME Base64-encoded content from a binary artifact, or from a text artifact in its original encoding.
A message string or message format string rendered in multiple formats.
3 nested properties
A plain text message string or format string.
A Markdown message string or format string.
Key/value pairs that provide additional information about the object.
Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]Specifies whether a response was received from the server.
Key/value pairs that provide additional information about the object.
1 nested properties
A set of distinct strings that provide additional information.
[]