Rollback the SARIF version to 2.1 since github doesn't support 2.2

[ccojocar]

No description provided.

[codecov-commenter]

⚠️ Please install the to ensure uploads and comments are reliably processed by Codecov.

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 68.48%. Comparing base (ea26e84) to head (8f3524d).
Report is 1 commits behind head on master.

❗ Your organization needs to install the Codecov GitHub app to enable full functionality.

Additional details and impacted files

@@           Coverage Diff           @@
##           master    #1210   +/-   ##
=======================================
  Coverage   68.48%   68.48%           
=======================================
  Files          75       75           
  Lines        4360     4360           
=======================================
  Hits         2986     2986           
  Misses       1226     1226           
  Partials      148      148           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[niij]

^ I have the same issue as the linked PR above (@Michad). Our builds are failing with a rejection from github that the SARIF file is invalid. This is occurring when using both of the following actions:

• securego/gosec@master (v2.21.1 014751c)
• github/codeql-action/upload-sarif (v2.26.6 be8b74c09c1778bcdbea38e1a45efea2cb73e18c)

I'm pinning securego/[email protected] as a workaround for now.