I believe that you’ve misunderstood my reply. TLDR: this is, in fact, a discussion around priorization/ranking, just as the title of #20 indicates that it concerned. As noted in #20, result.level is our rough approximation around severity.
From: Larry Golding (Myriad Consulting Inc) <>
Sent: Thursday, November 15, 2018 11:27 AM
To: 'Paul Anderson ()' <>; Michael Fanning <>
Cc: OASIS SARIF TC Discussion List <>
Subject: My response to the "severity" issue
Importance: High
I re-read the severity/priority discussions, then provided a detailed response and proposal in
https://github.com/oasis-tcs/sarif-spec/issues/280 (“Resurrect severity of rules and results”).
Larry
