Need a compliance test suite

[ghost]

Jeffrey van Gogh suggested:

When the doc is more stable, it would be great to have a compliance test suite so both producers and consumers can be sure that they're generating the right format.

[michaelcfanning]

great suggestion for the sarif sdk

[ghost]

We have a set of real-world data files, and a tool to ensure they work against the current spec.

We don't have:

• A full set of hand-authored test files that exhaustively exercise the spec.
• Documentation on how to use it.