This required in order to accommodate sarifLog.taxonomies metadata, which will be a log level construct, as the data itself is entirely external to any tool execution (e.g., the CWE definitions).

The property names would be a JSON path to the construct which has been externalized.

@lgolding per discussion