Updating SARIF results does not remove the code scanning alerts and so right now this demo has to delete the existing branch and PR and recreate it to get accurate GitHub code scanning alerts. After some discussion, this issue may be a result of the new clean image having a mismatch in image tags (since unique tags append the datetime). This issue is for modifying the demo to use matching tags to see if remediates this GitHub nuance.
Updating SARIF results does not remove the code scanning alerts and so right now this demo has to delete the existing branch and PR and recreate it to get accurate GitHub code scanning alerts. After some discussion, this issue may be a result of the new clean image having a mismatch in image tags (since unique tags append the datetime). This issue is for modifying the demo to use matching tags to see if remediates this GitHub nuance.