Merge pull request #4 from johnfosborneiii/main

Add sarif gen fixes

Author: johnfosborneiii

.github/workflows/generate-sarif.yaml

@@ -32,17 +32,6 @@ jobs:
         run: python generate-malcontent-sarif.py
 
       - name: Upload SARIF to GitHub
-        uses: github/codeql-action/upload-sarif@v2
+        uses: github/codeql-action/upload-sarif@v3
         with:
           sarif_file: scans/malcontent-report.sarif
-
-      - name: Commit and push updated SARIF file
-        run: |
-          git config user.name "GitHub Actions"
-          git config user.email "actions@github.com"
-          git add scans/malcontent-report.sarif
-          if git diff --cached --quiet; then
-            echo "No changes to commit."
-          else
-            git commit -m "Update malware diff SARIF Report: v8.3.40 → v8.3.41"
-            git push origin "${GITHUB_REF#refs/heads/}"

generate-malcontent-sarif.py

@@ -8,7 +8,8 @@
 output_path = Path("scans/malcontent-report.sarif")
 
 # === DETERMINE LOCAL REPO ROOT ===
-local_repo_root = Path.cwd() / sub_repo_path
+repo_root = Path(__file__).resolve().parent
+local_repo_root = repo_root / sub_repo_path
 if not local_repo_root.exists():
     raise FileNotFoundError(f"Expected repo root not found: {local_repo_root}")
 
@@ -40,8 +41,7 @@
         },
         "versionControlProvenance": [{
             "repositoryUri": repository_uri,
-            "revisionId": commit_sha,
-            "uriBaseId": "%SRCROOT%"
+            "revisionId": commit_sha
         }],
         "results": []
     }]
@@ -87,8 +87,7 @@
             "locations": [{
                 "physicalLocation": {
                     "artifactLocation": {
-                        "uri": str(rel_path),
-                        "uriBaseId": "%SRCROOT%"
+                        "uri": str(rel_path)
                     },
                     "region": {
                         "startLine": 1