fix: address PR review feedback for SARIF summaries

- Escape pipe characters in message text to prevent markdown table corruption
- Upload entire codeql-results directory to support multi-language scans

Author: david-waltermire

.github/workflows/build.yml

@@ -174,7 +174,7 @@ jobs:
                 echo "" >> $GITHUB_STEP_SUMMARY
                 echo "| Severity | Rule | Location | Message |" >> $GITHUB_STEP_SUMMARY
                 echo "|----------|------|----------|---------|" >> $GITHUB_STEP_SUMMARY
-                jq -r '.runs[0].results[] | "| \(.level // "warning") | \(.ruleId // "unknown") | `\(.locations[0].physicalLocation.artifactLocation.uri // "unknown"):\(.locations[0].physicalLocation.region.startLine // "?")` | \(.message.text | gsub("\n"; " ") | .[0:80]) |"' "$sarif" >> $GITHUB_STEP_SUMMARY
+                jq -r '.runs[0].results[] | "| \(.level // "warning") | \(.ruleId // "unknown") | `\(.locations[0].physicalLocation.artifactLocation.uri // "unknown"):\(.locations[0].physicalLocation.region.startLine // "?")` | \(.message.text | gsub("\n"; " ") | gsub("\\|"; "\\\\|") | .[0:80]) |"' "$sarif" >> $GITHUB_STEP_SUMMARY
                 echo "" >> $GITHUB_STEP_SUMMARY
                 echo "</details>" >> $GITHUB_STEP_SUMMARY
               fi
@@ -229,7 +229,7 @@ jobs:
             echo "" >> $GITHUB_STEP_SUMMARY
             echo "| Severity | Rule | Location | Message |" >> $GITHUB_STEP_SUMMARY
             echo "|----------|------|----------|---------|" >> $GITHUB_STEP_SUMMARY
-            jq -r '.runs[0].results[] | "| \(.level // "warning") | \(.ruleId // "unknown") | `\(.locations[0].physicalLocation.artifactLocation.uri // "unknown"):\(.locations[0].physicalLocation.region.startLine // "?")` | \(.message.text | gsub("\n"; " ") | .[0:80]) |"' trivy-results.sarif >> $GITHUB_STEP_SUMMARY
+            jq -r '.runs[0].results[] | "| \(.level // "warning") | \(.ruleId // "unknown") | `\(.locations[0].physicalLocation.artifactLocation.uri // "unknown"):\(.locations[0].physicalLocation.region.startLine // "?")` | \(.message.text | gsub("\n"; " ") | gsub("\\|"; "\\\\|") | .[0:80]) |"' trivy-results.sarif >> $GITHUB_STEP_SUMMARY
             echo "" >> $GITHUB_STEP_SUMMARY
             echo "</details>" >> $GITHUB_STEP_SUMMARY
           fi
@@ -246,7 +246,7 @@ jobs:
       if: ${{ !inputs.skip_code_scans && env.UPLOAD_SCAN_SARIF == 'true' }}
       uses: github/codeql-action/upload-sarif@5d4e8d1aca955e8d8589aabd499c5cae939e33c7
       with:
-        sarif_file: codeql-results/java.sarif
+        sarif_file: codeql-results
         category: 'codeql'
     - name: Upload Trivy scan results to GitHub Security tab
       if: ${{ !inputs.skip_code_scans && env.UPLOAD_SCAN_SARIF == 'true' }}