Skip the SARIF notification object workaround for CLIs that have fixed this bug
lib/defaults.json
security-experimental
codeql-config.yml
.github/actions