SARIF should have clearer guidance for sensitive data handling best practices

[ShiningMassXAcc]

Discussion of deterministic CBOR surfaced a topic around best practice for handling sensitive data.

The technical committed discussion briefly various possible enterprise use cases that exist today (from workarounds to remediations) - is there something SARIF can include in the standard here?

[sthagen]

I think yes, we can amend the Safety, Security, and Data Protection section accordingly.

[sthagen]

Meeting 2025-04-10:

Stefan to provide editor text to be included in prose as proposed in his issue comment (proposal of place)

[sthagen]

Provided minimal implementation - @ShiningMassXAcc please kindly review at #757