SARIF report not compliant

[antoinedeschenes]

Hi,

GitHub suggests to use the Microsoft SARIF validator to check reports when there are issues. I just scanned a report file and it has compliance errors

results.sarif file:

{"version":"2.1.0","runs":[{"tool":{"driver":{"name":"Psalm","informationUri":"https:\/\/psalm.dev","version":"4.7.2@83a0325c0a95c0ab531d6b90c877068b464377b5"}},"results":[]}]}

produces

SARIF2008: : The SARIF log file does not contain a '$schema' property. Add a '$schema' property that refers to the final, OASIS standard version of the SARIF 2.1.0 schema. This enables IDEs to provide Intellisense for SARIF log files.

The $schema property is missing as should be found here:
https://github.com/microsoft/sarif-tutorials/blob/main/samples/1-Introduction/simple-example.sarif#L3

[weirdan]

The schema URL should probably be https://json.schemastore.org/sarif-2.1.0.json (and not the RTM version shown in that example).