RE: My response to the "severity" issue

My response will be inline in the issue.

 

From: Michael Fanning <>

Sent: Thursday, November 15, 2018 12:43 PM

To: Larry Golding (Myriad Consulting Inc) <>; 'Paul Anderson ()' <>

Cc: OASIS SARIF TC Discussion List <>

Subject: RE: My response to the "severity" issue

 

I believe that you’ve misunderstood my reply. TLDR: this is, in fact, a discussion around priorization/ranking, just as the title of #20 indicates that it concerned. As noted in #20, result.level is our rough approximation around severity.

 

From: Larry Golding (Myriad Consulting Inc) <>

Sent: Thursday, November 15, 2018 11:27 AM

To: 'Paul Anderson ()' <>; Michael Fanning <>

Cc: OASIS SARIF TC Discussion List <>

Subject: My response to the "severity" issue

Importance: High

 

I re-read the severity/priority discussions, then provided a detailed response and proposal in

https://github.com/oasis-tcs/sarif-spec/issues/280 (“Resurrect severity of rules and results”).

 

Larry