Skip to content

Define prototype SARIF model for constraint validation results#519

Draft
aj-stein-nist wants to merge 22 commits intousnistgov:developfrom
aj-stein-nist:516-sarif
Draft

Define prototype SARIF model for constraint validation results#519
aj-stein-nist wants to merge 22 commits intousnistgov:developfrom
aj-stein-nist:516-sarif

Conversation

@aj-stein-nist
Copy link
Contributor

@aj-stein-nist aj-stein-nist commented Jan 25, 2024 •
edited
Loading

Committer Notes

Closes #516.

All Submissions:

  • Have you followed the guidelines in our Contributing document?
  • Have you checked to ensure there aren't other open Pull Requests for the same update/change?
  • Have you squashed any non-relevant commits and commit messages? [instructions]
  • Do all automated CI/CD checks pass? N/A

Changes to Core Features:

  • Have you added an explanation of what your changes do and why you'd like us to include them?
  • Have you included examples of how to use your new feature(s)?
  • Have you updated all website](https://pages.nist.gov/metaschema) and readme documentation affected by the changes you made? Changes to the website can be made in the website/content directory of your branch.
  • Have you written new tests for your core changes, as applicable?

@aj-stein-nist aj-stein-nist self-assigned this Jan 25, 2024
@aj-stein-nist aj-stein-nist force-pushed the 516-sarif branch 3 times, most recently from b46301a to 0276fa4 Compare January 26, 2024 00:05
@aj-stein-nist aj-stein-nist linked an issue Jan 26, 2024 that may be closed by this pull request
Define MVP SARIF model in Metaschema #517
Open
david-waltermire pushed a commit to GSA/metaschema that referenced this pull request Jun 16, 2024
Added minimal Metaschema module based on the Static Analysis Results …
c653497 
…Interchange Format (SARIF). This uses usnistgov#519 as a starting point.
@david-waltermire david-waltermire mentioned this pull request Jun 16, 2024
Open
8 tasks
david-waltermire pushed a commit to GSA/metaschema that referenced this pull request Jun 16, 2024
Added minimal Metaschema module based on the Static Analysis Results …
86eb96f 
…Interchange Format (SARIF). This uses usnistgov#519 as a starting point.
david-waltermire pushed a commit to GSA/metaschema that referenced this pull request Jun 20, 2024
Added minimal Metaschema module based on the Static Analysis Results …
2c23064 
…Interchange Format (SARIF). This uses usnistgov#519 as a starting point.
david-waltermire pushed a commit to GSA/metaschema that referenced this pull request Jun 21, 2024
Added minimal Metaschema module based on the Static Analysis Results …
6a61e1a 
…Interchange Format (SARIF). This uses usnistgov#519 as a starting point.
david-waltermire pushed a commit to GSA/metaschema that referenced this pull request Jul 12, 2024
Added minimal Metaschema module based on the Static Analysis Results …
3130322 
…Interchange Format (SARIF). This uses usnistgov#519 as a starting point.
david-waltermire pushed a commit to david-waltermire/metaschema that referenced this pull request Jul 24, 2024
Added Metaschema module based on the Static Analysis Results Intercha…
d5e81d6 
…nge Format (SARIF). This uses usnistgov#519 as a starting point.
Michaela Iorga and others added 14 commits August 21, 2024 20:19
Fixed broken hyperlink.
a75abab
@dependabot
Bump postcss from 8.4.35 to 8.4.41 (usnistgov#730)
3e10f84 
Bumps [postcss](https://github.com/postcss/postcss) from 8.4.35 to 8.4.41.
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.4.35...8.4.41)

---
updated-dependencies:
- dependency-name: postcss
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump actions/cache from 4.0.1 to 4.0.2 (usnistgov#574)
15e56cc 
Bumps [actions/cache](https://github.com/actions/cache) from 4.0.1 to 4.0.2.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](actions/cache@ab5e6d0...0c45773)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump autoprefixer from 10.4.18 to 10.4.20 (usnistgov#731)
4ae06af 
Bumps [autoprefixer](https://github.com/postcss/autoprefixer) from 10.4.18 to 10.4.20.
- [Release notes](https://github.com/postcss/autoprefixer/releases)
- [Changelog](https://github.com/postcss/autoprefixer/blob/main/CHANGELOG.md)
- [Commits](postcss/autoprefixer@10.4.18...10.4.20)

---
updated-dependencies:
- dependency-name: autoprefixer
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump @fullhuman/postcss-purgecss from 5.0.0 to 6.0.0 (usnistgov#577)
d069efd 
Bumps [@fullhuman/postcss-purgecss](https://github.com/FullHuman/purgecss) from 5.0.0 to 6.0.0.
- [Release notes](https://github.com/FullHuman/purgecss/releases)
- [Changelog](https://github.com/FullHuman/purgecss/blob/main/CHANGELOG.md)
- [Commits](FullHuman/purgecss@v5.0.0...v6.0.0)

---
updated-dependencies:
- dependency-name: "@fullhuman/postcss-purgecss"
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump ajv-formats from 2.1.1 to 3.0.1 (usnistgov#578)
4f4a741 
Bumps [ajv-formats](https://github.com/ajv-validator/ajv-formats) from 2.1.1 to 3.0.1.
- [Release notes](https://github.com/ajv-validator/ajv-formats/releases)
- [Commits](ajv-validator/ajv-formats@v2.1.1...v3.0.1)

---
updated-dependencies:
- dependency-name: ajv-formats
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump peaceiris/actions-hugo from 2 to 3 (usnistgov#579)
2301dc8 
Bumps [peaceiris/actions-hugo](https://github.com/peaceiris/actions-hugo) from 2 to 3.
- [Release notes](https://github.com/peaceiris/actions-hugo/releases)
- [Changelog](https://github.com/peaceiris/actions-hugo/blob/main/CHANGELOG.md)
- [Commits](peaceiris/actions-hugo@v2...v3)

---
updated-dependencies:
- dependency-name: peaceiris/actions-hugo
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump peaceiris/actions-gh-pages from 3.9.3 to 4.0.0 (usnistgov#581)
bc7de4c 
Bumps [peaceiris/actions-gh-pages](https://github.com/peaceiris/actions-gh-pages) from 3.9.3 to 4.0.0.
- [Release notes](https://github.com/peaceiris/actions-gh-pages/releases)
- [Changelog](https://github.com/peaceiris/actions-gh-pages/blob/main/CHANGELOG.md)
- [Commits](peaceiris/actions-gh-pages@373f7f2...4f9cc66)

---
updated-dependencies:
- dependency-name: peaceiris/actions-gh-pages
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@iMichaela
Update node version in the workflow from v16 -> v20 (usnistgov#737)
8717ff4 
* Aiming to fix markdown-link-check by pushing up the nove version from v16 to v20

* Checking one file at a time with markdown-link-check and not all together to avoid a bug in the checker

---------

Co-authored-by: Michaela Iorga <michaela@nist.gov>
@dependabot
Bump markdown-link-check from 3.11.2 to 3.12.2 (usnistgov#632)
ecea9cd 
Bumps [markdown-link-check](https://github.com/tcort/markdown-link-check) from 3.11.2 to 3.12.2.
- [Release notes](https://github.com/tcort/markdown-link-check/releases)
- [Changelog](https://github.com/tcort/markdown-link-check/blob/master/CHANGELOG.md)
- [Commits](tcort/markdown-link-check@v3.11.2...v3.12.2)

---
updated-dependencies:
- dependency-name: markdown-link-check
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump actions/checkout from 4.1.2 to 4.1.7 (usnistgov#654)
35981fb 
Bumps [actions/checkout](https://github.com/actions/checkout) from 4.1.2 to 4.1.7.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@9bb5618...692973e)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump sass from 1.72.0 to 1.77.8 (usnistgov#732)
362a985 
Bumps [sass](https://github.com/sass/dart-sass) from 1.72.0 to 1.77.8.
- [Release notes](https://github.com/sass/dart-sass/releases)
- [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md)
- [Commits](sass/dart-sass@1.72.0...1.77.8)

---
updated-dependencies:
- dependency-name: sass
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump lycheeverse/lychee-action from 1.9.3 to 1.10.0 (usnistgov#733)
5d53a22 
Bumps [lycheeverse/lychee-action](https://github.com/lycheeverse/lychee-action) from 1.9.3 to 1.10.0.
- [Release notes](https://github.com/lycheeverse/lychee-action/releases)
- [Commits](lycheeverse/lychee-action@c053181...2b973e8)

---
updated-dependencies:
- dependency-name: lycheeverse/lychee-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump actions/upload-artifact from 4.3.1 to 4.3.6 (usnistgov#734)
1742d48 
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.3.1 to 4.3.6.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@5d5d22a...834a144)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@david-waltermire david-waltermire mentioned this pull request Dec 8, 2024
Closed
3 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

@aj-stein-nist aj-stein-nist

Labels

Unfinished

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

Define MVP SARIF model in Metaschema

2 participants

@aj-stein-nist @iMichaela