feat: Update SARIF parsing and loading

[GeekMasher]

No description provided.

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Snapshot Warnings

⚠️: No snapshots were found for the head SHA a6b3d93.

Ensure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.

OpenSSF Scorecard

Package	Version	Score	Details
cargo/ghastoolkit	0.11.4	Unknown	Unknown
cargo/serde_json	>= 1.0.0, < 2.0.0	🟢 6	Details Check Score Reason Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Code-Review ⚠️ 0 Found 2/23 approved changesets -- score normalized to 0 Maintained 🟢 5 2 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 5 Packaging ⚠️ -1 packaging workflow not detected Binary-Artifacts 🟢 10 no binaries found in the repo CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Token-Permissions 🟢 10 GitHub workflow tokens follow principle of least privilege Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 Security-Policy ⚠️ 0 security policy file not detected Vulnerabilities 🟢 10 0 existing vulnerabilities detected License 🟢 10 license file detected Fuzzing 🟢 10 project is fuzzed Signed-Releases ⚠️ -1 no releases found Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0

Scanned Files

• Cargo.lock
• Cargo.toml

[Copilot]

Pull Request Overview

This PR refactors how SARIF files are loaded and parsed by replacing manual file reads with a Sarif::try_from call, adds error logging for parse failures, logs the SARIF output path, and updates the serde_json dependency version.

• Use Sarif::try_from for parsing and add an Err branch for error logging
• Log the SARIF output path after processing
• Change serde_json dependency from a fixed version to a caret requirement

Reviewed Changes

Copilot reviewed 2 out of 3 changed files in this pull request and generated 3 comments.

File	Description
src/main.rs	Refactored SARIF parsing to use Sarif::try_from, added error handling and output-path logging
Cargo.toml	Updated serde_json version specification to "1.0"