Proposal: change underlying name of SARIF from Static ... to Systematic ...

[Motional-Charles-Wilson]

For the next major release of SARIF the underlying name should be changed from Static Analysis Report Interchange Format to Systematic Analysis Report Interchange Format. This would better reflect the scope and applicability of the standard. This change would be in support of the additional non-static analysis use cases being recommended for support in the next major revision.

[sthagen]

I think we discussed this over a year ago in quite some length weighing charter change needs against good naming effects. I remember we decided to postpone until publication of the errata (which is now passed).

I am in favor of discussing this issue but I am -1 o the "Systematic" as this sounds to me too sales like similar to "Clean" or "Optimal" ... but we will find for sure the best path forward for the SARIF ... I think it is simple as long as the first word starts with "S" or has an "s" at a prominent place (as the "x" in "Extensible" Markup Language --> XML)

Amending the proposal:

I would be OK with a term like:

Software Analysis Report Interchange Format (SARIF)

or

System Analysis Report Interchange Format (SARIF)

with a slight preference for the latter.

[davidmalcolm]

Some possible candidates that begin with an "s":

• static (status quo)
• serialized
• system
• systemic
• systematic
• systematized
• SARIF (as a recursive acronym)
• software (but too limited in scope)
• structured
• schema
• standardized
• Stefan's
• security

[davidmalcolm]

Did we decide on "System" here?

[sthagen]

@davidmalcolm Yes, System it is. We documented that decision in Minutes from TC meeting 2024-06-06 in section 5.2 "Review of Decisions Reached" (as the third of three decisions noted).